Just adding to Scion9066’s reply: The usual workflow in practice when logging in to an “other” (hotel/work computer) computer is that you will be prompted to c

Just adding to Scion9066’s reply: The usual workflow in practice when logging in to an “other” (hotel/work computer) computer is that you will be prompted to complete the authentication using a device with your passkeys (like your phone). The CTAP protocol they mentioned effectively turns your phone into a security key. Using your phone with passkeys you scan the QR code shown by the website, then CTAP magic happens and you’re authenticated. The great thing about this is that no reusable credentials are ever revealed to the dodgy computer.