Why is #2 important? Passkeys break the 1:1 relationship between credentials and accounts, so just register multiple passkeys. If it can be extracted, it can b

Why is #2 important? Passkeys break the 1:1 relationship between credentials and accounts, so just register multiple passkeys. If it can be extracted, it can be stolen. Better to stick your secret material in a HSM that takes the key with it when it dies.