Glossary: Web App Security and Authentication

Passkey

Also written: passkeys, origin binding, synced passkey, device-bound passkey

A sign-in key pair for one site whose private key stays on the device. Origin binding means a look-alike site gets no usable signature. Synced passkeys copy across devices; device-bound ones never leave one.