How passkeys protect your account

Why passkeys are more secure than passwords for your assets.

A passkey is a phishing-resistant credential stored in your device’s secure enclave and unlocked with your biometrics or device PIN. It never leaves your device and cannot be reused across sites, so there is no password to steal or phish. Your Tove session is held in httpOnly cookies that client-side scripts cannot read.