> I think passkeys can not be stolen for the same reason jailbreak a phone doesn't allow a user to access to extract touch-id data. For the same reason Google a

> I think passkeys can not be stolen for the same reason jailbreak a phone doesn't allow a user to access to extract touch-id data. For the same reason Google also can't access that information. Google allows exporting keys to Google cloud and importing them onto another device. This means that keys can be exported from secure storage, and if Google can do that then an attacker also can. Google claims, that PIN code or unlock pattern might be required to recover keys from cloud backup, but those are easy to bruteforce. This is not real hardware key that doesn't allow exporting private keys.