Experts say we should use passkeys, but can a smartphone PIN really be safer than a password?

A reader questions how a smartphone PIN or facial recognition can be safer than a complicated password with two-factor authentication. Experts promote passkeys because they are device-specific, not stored on company servers, and unphishable. The reader worries about phone theft or loss compromising the passkey. The UK's National Cyber Security Centre endorses passkeys despite these concerns.