The way i understand it, passkeys test for a combination of what you have and what you are (for those that check user presence, which is all of them I suppose); whereas passwords test what you know.

From my reading, passkeys give more control to the platform/service provider, whereas passwords do the reverse.

The former clearly benefits corps in their unique ways - motivated by profit, security, data/spying and so on.

The current iteration of passkeys is not the form that is being challenged by the earlier anti-passkey post. But rather a floodgates problem. Pretending that it will never happen is asking for trouble.

The better option (be it passwords or passkeys) needs to demonstrate that it gives control to the user.

I’m in the passwords camp, I do not see what convenience or added security passkeys might provide in any of my use cases that is worth sacrificing my level of control and choice.

Then this turns into yet another arms race of fixing and breaking.

Sloppy sauce