How passkeys log you in without a password, and why phishing can't steal them

Passwords have two problems that no amount of "use a strong password" advice fixes. You can be tricked into typing them on a fake site. And the website has to store something derived from them, which