PracticeDigital SafetyOne scored question.Why is a passkey described as phishing-resistant when an authenticator-app code is not?A passkey expires much faster than the thirty-second window of an app codeThe key is bound to the real site, so a lookalike gets nothingA passkey is far longer and more random than a code, so it cannot be guessedApp codes travel over the mobile network, where they can be interceptedKeys 1 to 4Tested in Accounts: The Part That Actually Gets You
