
Are Passkeys a Trap? Fact-Checking a Viral Warning
A Substack post tells everyone to avoid passkeys. I checked it against the specs, vendor docs and NIST guidance. The lock-in worry is real, but attestation isn’t being forced on consumers yet, and passkeys beat TOTP on phishing. Here’s what holds up, what doesn’t, and what to do.
