Passwords are easy to steal, reuse and forget. Passkeys replace them with a pair of digital keys: a private one that stays on your device and a public one held by the service. Signing in uses your fingerprint, face or device PIN, with nothing secret sent that could be stolen.
Because there is no password to phish or leak, passkeys resist the most common attacks, and they are being adopted across major services. The main wrinkles are getting a passkey smoothly between your devices and having a recovery path if a device is lost, which the standards and platforms have been working to smooth out.