“Of course, like any new beginning, the change to passkeys will take time. That’s why passwords and 2SV will still work for Google Accounts.”
Google now lets every account sign in with a passkey tied to a fingerprint, face scan or screen lock PIN. The password stays, so a phisher still has the old door. Passkeys resist phishing only once the password is gone, and Google left it in place for “some time to come.” The end of the password starts with keeping the password.