Passkeys, which let people sign in with a fingerprint, face or device PIN, are now supported by a growing number of apps and websites. Security experts say they are far harder to phish than traditional passwords. The main hurdle remains helping people understand how to move passkeys between devices.