Thats a nice write-up! I always thought one of the origins was from a guard bellowing “Whats the word to pass!” from a medieval tower. ![]()
Am looking forward to a time when I can use passkeys but I see three hurdles.
-
Low adoption rate with no incentive to adopt by most of the sites I use.
-
Inconsistent implementations are the norm. Every site that supports passkeys handles them differently. Even the older FIDO1 security keys arent implemented in a standardized fashion with major sites like Paypal only allowing 1 of them per account.
-
Passkeys are only as strong as the weakest 2FA the site supports and this too often means they also require Email or SMS text as backup.