Obviously via public key cryptography. It seems that you lack a sufficient understanding on this subject to back up the repeated snarky comments.
One of major failures of the passkey marketing is that the FIDO Alliance left it at:
1) Vendors marketing passkeys as this brand new thing for their customers;
2) Anyone technical needing to already know that passkeys weren’t this brand new vendor specific thing, and reading the standards documents.
Passkeys are essentially just a marketing name for FIDO2 credentials with a focus on particular kinds of implementation. But FIDO didn’t bother to handle communications to technical folks outside the authentication space, and they’ve failed to do so effectively beyond that area.