Passkeys protect against phishing and brute-force attacks by eliminating the need for users to enter passwords.