> With a password, I can hold it "in my hand". It's a string. I can export, and basically know that I have the whole thing. Fair enough! It still seems a bit l

> With a password, I can hold it "in my hand". It's a string. I can export, and basically know that I have the whole thing. Fair enough! It still seems a bit like magic when it works. > With a passkey, I don't understand it enough to convince myself that my password manager is not able to lock me out of my accounts. I'm not sure how a pass[word|key] manager would lock you out of your accounts, but if you don't use password managers for that reason, that same theoretical danger would be true of passkey managers. I don't personally have any of my extremely secure auto-created passwords memorized either, so for me a passkey is not different in that respect. If I inadvertently delete a pass[word|key], I'll have to go through the "forgot my password" process. Within 5 years, I can imagine services without password support. I'd expect that in "lost passkey" cases, those services will support allowing you to log in with a one-time code sent to your registered email address (or SMS) and/or with backup codes. > I've migrated passwords once from one password manager to another. I don't understand at all how this is supposed to happen with passkeys. Here's a real-world example: I played with Apple's passkey support before 1Password's passkey support was available. When 1Password added passkey support, I added another passkey to the sites that supported it and called it "1Password". And here's what it looks like when your Google account has 3 passkeys: https://imgur.com/a/NQl8XPI https://imgur.com/a/NQl8XPI