Passkeys are being introduced.
From what I understand so far, a passkey involves the storage of a private key, and retention of a public key with the internet service. Eg Google, Apple, Microsoft, Reddit, StackExchange, etc.
Does the formation of a passkey, or the subsequent use of a passkey by itself alone, identity the hardware device the passkey is used on, and thereby potentially can be used to link all other activity that is associated with that hardware device to that passkey and that user?
The answer to this question may depend on the company/internet service that generates the two keys, private and public, to enable a passkey interaction.
For example, is it possible that a company can use the device IMEI as part of the construction of the passkey? Then at the back end in some fashion using the passkey to link online activity to that physical device and hence the user. Thus enabling the passkey to become a universal identifier for data collection of the user across different sites.