Something I don't see talked about often regarding passkeys, is that they seem to be useful in addition to other methods, not instead. I've been thinking that

Something I don't see talked about often regarding passkeys, is that they seem to be useful in addition to other methods, not instead. I've been thinking that they allow you to have long, non-memorisable unique passwords for an account (1), and then add passkeys on the devices you use often. The long, non-memorisable password isn't inconvenient because you don't need to use it, and the passkeys which are used day to day are resistant to phishing & keyloggers (as I understand). However, I don't know if that is how they're being used or marketed. 1) Perhaps even 2FA too, which wouldn't be as inconvenient if it's only used rarely. Given the points raised in this article, I'm rethinking whether that is necessary.