Ethan Hawksley critiques passkeys, highlighting that while they offer strong protection against phishing and server breaches, they pose significant risks for personal users, particularly around account lockout and recovery challenges. He points out limitations in hardware keys, reliance on operating system account syncing, fragmented third-party manager support, and usability issues on non-personal devices. Hawksley concludes that passkeys are better suited for enterprise environments and that current alternatives like password managers combined with TOTP remain more practical for individual users.
