Inside WebAuthn: How Passkeys Really Work Under the Hood
WebAuthn replaces shared secrets with public key cryptography bound to a device. This post walks through the registration and authentication ceremonies, the role of authenticators and the client, and why passkeys are phishing-resistant by construction.