I wasn't sure what your concern was, but is it that?
1 ) Hardware authenticators won't spit their root secret, almost by design.
2 ) Webauthn doesn't require that the authenticator store the list of accounts, also by design (for privacy). So if you want to switch from iPhone to Android, you have to remember all websites you used Passkey on, and go one by one hunting down the right security settings page.
1 ) Hardware authenticators won't spit their root secret, almost by design.
2 ) Webauthn doesn't require that the authenticator store the list of accounts, also by design (for privacy). So if you want to switch from iPhone to Android, you have to remember all websites you used Passkey on, and go one by one hunting down the right security settings page.