By Johann-Philipp Thiers, Security Specialist at Swissbit.
Passkeys have become one of the most tangible examples of passwordless authentication. They are easier for users, more resistant to phishing, and a major step away from passwords, shared secrets, and credential reuse. But behind the user-friendly experience sits a complex technical ecosystem: FIDO2, WebAuthn, CTAP, authenticators, relying parties, metadata services, and public-key infrastructure.
