In a real application, your user should be authenticated with another method before registering a passkey. The password field mocks that behavior here.

Password content is completely ignored for this demo. Privacy policy.