I do sort of like the concept of passkeys, especially being able to throw them into my password manager. However a lot of sites I've encountered that implement them have decided that presenting a passkey can basically bypass MFA. I get that you'd have the passkey ideally protected by some MFA or biometric anyways, but I still like to have both forms of auth separated as much as possible.

> Allow sites and apps to upgrade existing accounts to use passkeys

Is "upgrade" the right word here?

I think it's becoming a term that is supposed to mean "make things better" but is now used to let a business force things you don't want/need/like on you.

In terms of passkeys, it would seem to take something portable you remember like a password and convert it to google password manager lockin.

The "not a fan of passkeys" link toward the bottom is a great read [1].

It mentions: As far as Apple is concerned, I would be satisfied if passkeys could be saved in a local, non-iCloud keychain, as normal keychain items with support for export and import. Ideally, the export format would be cross-platform, and I don't see why it couldn't be cross-platform, given that passkeys are just public-private key pairs tied to a domain. In that case, I would be happy to eliminate web passwords, since I already use randomly-generated, keychain-managed web passwords that can't be memorized (by me). Unless and until Apple provides such a solution, though, I remain extremely skeptical of passkeys and feel inclined to fight back against the notion of replacing and eliminating passwords.

[1]: https://lapcatsoftware.com/articles/2023/5/1.html

Would it be possible/viable for a third party to release such a piece of software? Does one already exist?

Maybe this would be somewhat sane if it's only handling automatically generated passwords that have never been viewed in the UI. But I doubt that.