> Passkeys parasitize on FIDO2 U2F standard U2F authenticators and the U2F protocol cannot support passkeys. A passkey is a discoverable credential which suppo

> Passkeys parasitize on FIDO2 U2F standard U2F authenticators and the U2F protocol cannot support passkeys. A passkey is a discoverable credential which supports user verification. U2F supports neither discoverability nor user verification. Passkeys as a user-facing term is meant to describe a user experience. Second factor authentication using U2F is a different experience. > The problem is that the site has now to trust user’s personal account in one of these platforms and that the user did the right thing and also the platforms will always be doing the right thing - e.g., they will handle attacks on user’s personal account properly. That is in fact how passwords work today. You can't tell if my password came from my head or from a excel spreadsheet printout I carry around in my wallet; from a cloud synchronized password manager or if I use the same password for every website which will accept it (otherwise, I will add exclamation marks to the end until it does).