Implementing Passkeys in Practice - Computerphile

Passkeys use public-key cryptography to replace passwords. When creating a passkey, the browser requests arguments from the server, then calls navigator.credentials.create() to generate a key pair via the TPM or password manager. The public key and credential ID are stored server-side. During login, the server sends a challenge that the client signs with the private key, proving possession without transmitting the key itself. The process involves JSON data exchange, certificate chains for attestation, and user verification through PINs or biometrics.