Citing resistance to phishing and credential reuse, the agency recommends passkeys wherever supported and warns that ...