Passkeys change the login risk model—and the recovery model_

Android’s Credential Manager supports passkeys and federated credentials through a consistent interface. Passkeys reduce phishing exposure, but teams still need account recovery, device change, and session policies.

Adding a passkey button without designing fallback and recovery moves support burden rather than removing it.

What changes in practice_

Support account linking deliberately, protect recovery with equivalent assurance, record credential events, and test users with multiple devices and identities.

• Design recovery before launch.
• Avoid silent duplicate accounts.
• Revoke sessions after high-risk changes.

Our take_

The durable advantage is not adopting the newest tool first. It is building the identity, state, evidence, and operating boundaries that let a real team own the system after launch.