It’s because password sucks. You’re supposed to not reuse passwords, but then you don’t remember passwords. So you use a password manager. Until more recently

It’s because password sucks. You’re supposed to not reuse passwords, but then you don’t remember passwords. So you use a password manager. Until more recently when phones and computers came with built-in password managers, no normal person was going to download a password manager. But even when you use a password manager, sometimes it doesn’t recognize the form fields. Or it doesn’t show it because the domain is different. Sometimes it doesn’t save a new login. The website has no direct awareness of the password manager so it’s hit and miss. So we created passkeys. Except it’s also hit and miss. Some sites only sometimes ask for them. No site explains what they are. Some sites ask for you to login with a passkey, which you wouldn’t have yet, but then don’t ask you to setup the passkey after logging in with a password, so you never set up a passkey. Overall authentication is a disaster and my very fiery take is overly technical people who are out of touch with normal people design authentication.