> Passkeys are effectively SSH keys under the hood.
Yes, that's the common rebuttal. It's resistant to MITM and phishing, but it's still not two-factor.
If you store your passkey on a yubikey with PIN, I suppose it's two-factor in the sense that you need the key and a PIN, but you can only store so many passkeys that way.
Yes, that's the common rebuttal. It's resistant to MITM and phishing, but it's still not two-factor.
If you store your passkey on a yubikey with PIN, I suppose it's two-factor in the sense that you need the key and a PIN, but you can only store so many passkeys that way.