"To use passkeys, you just use a fingerprint, face scan or pin to unlock your device, and they are 40% faster than passwords — and rely on a type of cryptography that makes them more secure. "
Who wrote this sentence? It's just a mess.
Who wrote this sentence? It's just a mess.
I'm not saying I prefer either one here, just that password authentication doesn't automatically mean you can brute force offline.
These types of chips tend to have many layers of physical security to protect the real key.
So it's making a system weaker against offline attacks if someone steals your hardware in exchange for making it stronger against phishing. This is probably the correct tradeoff for most people.
It's basically like a chip & pin bank card.