SecurityFrontendMobile
Passkeys / WebAuthn
Also written as Passkeys, Passkey, WebAuthn, FIDO2, Passwordless Authentication
A replacement for passwords where the user's phone or laptop holds a secret key and unlocks it with a fingerprint, face or PIN. Nothing reusable is typed, so there's nothing to phish or leak. WebAuthn and FIDO2 are the standards underneath; Apple, Google and Microsoft all support passkeys.
Think of it like
A house key that only works in your hand, instead of a door code anyone could overhear.
Junior or senior?
Doing it well is mostly about the awkward cases.
Senior sounds like
Talks about account recovery when a device is lost, users with several devices, and running passkeys alongside passwords during the rollout.
Ask them
“What happened when a user lost the device holding their passkey?”