What typically authenticates a user in the passkeys system?

In the passkeys system, authentication is primarily achieved through biometric methods such as TouchID or FaceID. These biometric systems are designed to provide a secure and user-friendly means of verifying the identity of a user.

When a user enrolls in a passkey system, their biometric data is captured and securely stored on their device, allowing for quick and effective authentication without needing to remember complex passwords. This method not only enhances security—since biometric data is unique to the individual—but also improves convenience, as users can access their accounts with just a fingerprint or facial recognition.

Other options, while commonly associated with user authentication, do not represent the primary means of authentication in the context of a passkeys system. PIN codes require memorization and are generally less secure compared to biometrics. Security tokens require a physical device or app to generate codes, which can also add complexity. Lastly, physical keys may refer to hardware tokens, which are separate from the passwordless authentication model represented by passkeys, thereby reinforcing the advantage of using biometrics for seamless access.