That’s not how it is and not how they were designed. It was assumed from the beginning that they would live in “an ecosystem”, ie tied to secure storage and secure distribution by some system handled user side and indeed that is what phase 1 looked like: Google, Microsoft and Apple stored them on your device and replicated them across your devices. Phase 2 introduced a “interception” API so other providers could get involved easily - so providers like 1Password could rely less on browser hacks and also offer secure storage and secure distribution. Then finally, phase 3, now more or less locked down, described a portability system so that you can migrate to other ecosystems.

Passkeys don’t require physical storage at all. All of my passkeys are in the cloud, synced across platforms.

I know, a VPS is nothing and running wireguard in a docker container takes 3 minutes.

Fair, but costs of resets overall. This is not a factor in tech giant costs.

You think big tech did this to save… on … CPU costs of password resets?

This is actually really what you think?

Love them.

Using 1Password for sync.

Never ever failed to connect to QR code passkey request, even on weird corporate networks.

Portability has gotten so much better - there’s now a defined standard for portability that passkey providers are implementing.

Honestly I cannot understand the criticism at all.