I’d much rather use a password and a two-factor auth via TOTP code. It’s fast, portable, I can store them on a variety of open source apps, and it’s very hard to hack. I don’t need to use a specific provider, or browser. Flexible and free.

Passkeys in their current implementation are comparatively a mess. Here’s an article that runs through many reasons why:

arstechnica.com/…/passkey-technology-is-elegant-b…