QhwyF3AxE

passkeys is a common noun (like the word “password”) and therefore should always be lowercase unless it’s the first word in the sentence.

This is a great point. And to respond to the other part of the parent comment about storing "all their credentials with one of the large tech companies" — you don’t even need to do that, if you don’t want to.

Apple just extended their Credential Provider API such that passkeys can now be synced using external providers, meaning password manager apps can save and offer passkeys on iOS, iPadOS, and macOS. So you can choose to sync your passkeys with whatever your favorite password manager is.

See this page: https://developer.apple.com/passkeys/

And Google announced a similar API a month or two ago.

See the section titled "Passkey support for Android apps" on this page: https://developers.google.com/identity/passkeys/supported-en...

> I can't print out my passkeys and store them in a safe, nor does there appear to be any system for allowing someone access to my passkeys.

Recovery is handled differently depending on who you are using to sync your passkeys. Apple has a great recovery story. iCloud Keychain supports both a "recovery key" and "recovery contacts".

See the section titled "Recovery security" in the "About the security of passkeys" doc: https://support.apple.com/en-us/HT213305

Additional relevant docs:

Recovery contact: https://support.apple.com/en-us/HT212513

Recovery key: https://support.apple.com/en-us/HT208072

Where did you get the idea that Apple and Google's implementations are hardware-bound?