This article is IMO factually wrong. Just take one example:
Passkeys only solve one use case - phishing where the user inputs their password and MFA into a fake site.
Passkeys solve a few issues:
- Phishing resistent
- Unique per site (e.g. protection against credential stuffing)
- Immune against brute force attacks
- And offer an (optional) way to log in with biometrics
This tech is clearly not perfect, but not as bad as this article suggests.
Also, you can store passkeys in a password vault like bitwarden and have it available on all your devices.
From what I’ve read in the last few month, it will probably not be ready for the release of android 16.