Passkeys use public-key cryptography and are bound to the legitimate website or app. They can reduce password reuse and prevent users from entering credentials into many look-alike phishing pages.
When available, enable passkeys through an account’s official security settings and retain approved recovery methods.