#Authentication

Passkeys are replacing passwords across major apps and sites, but how do they actually work? We explain the FIDO2 cryptography behind them in plain English, why they are phishing-resistant, the difference between synced and device-bound passkeys, and what happens if you lose your phone.

Two-factor authentication (2FA) dramatically improves account security, but the method you choose matters a lot. We rank the common options, from SMS codes to authenticator apps to hardware keys and passkeys, by how well they actually protect you.