This article outlines key insights gained from building passkeybot, a tool for adding passkey authentication to websites. It covers concepts like secure enclaves, user presence vs. user verification, and the implications of attestation in passkey systems. The discussion also touches on related origin requests, Bluetooth sign-ins, and the use of PKCE in authentication flows.