Passkeys are a misnomer; it's the same FIDO2 protocol, but the third party is trusting your authenticator for verification, instead of doing that themselves wit

Passkeys are a misnomer; it's the same FIDO2 protocol, but the third party is trusting your authenticator for verification, instead of doing that themselves with a password. From what I understand, the big three OS vendors are working on a way to sync private keys, but IMO, it's unnecessary; you should be able to register multiple passkeys per service, just as you can with ordinary FIDO2/WebAuthn credentials, because to the service they are one and the same. For example, you could register a Yubikey and lock it in a safe as your backup. What makes this work is an additional attestation payload the authenticator passes along with a challenge response, and that's what the secure element in TPM, T2, and Yubikey provides. So the question of "how do I save and export my credentials" is kind of moot; they are tied to your devices, they're synced by the authenticator if you want using an additional protocol (the "sync fabric"), and you should be registering backup devices if you're worried.