Think of it like an old-fashioned wax seal. You carry a signet ring that never leaves your hand — and that one fact is the whole reason a passkey can't be stolen, copied, or faked.
A signet ring presses a design into wax. Anyone can recognize the design, but only your ring can make it — and the ring stays with you. A passkey works the same way. ComicBase keeps a card showing your seal, so it can recognize your mark; you keep the ring, which never travels. Everything below is just those two pieces, doing their job.
You and ComicBase each keep a way to recognize the other.
Two quick checks — one each way — and neither ring changes hands.
Fair question: you replaced a 16-character password with a 4-digit code or a fingerprint. That sounds like a downgrade — until you notice what the code actually unlocks. It isn't your account. It's a box.
Your PIN or fingerprint is just the lock on a key box — and the box is a specially protected chip inside your phone or computer. That's where the ring really lives. The code's whole job is to keep the kids out: to stop whoever picks up your device from stamping in your name.
A password has to survive attack from the whole world — anyone, anywhere, can try guesses against it, billions per second if a site's password list ever leaks. Your code faces none of that. It never leaves your device, ComicBase never sees it, and it's useless without the physical device in hand. Even then, the chip allows only a few wrong tries before it locks up — so “10,000 possible PINs” meets “about five guesses.”
So the honest comparison isn't 4 digits vs. 16 characters. It's a code that works only on one device you're holding vs. a password that can be phished, leaked, and guessed from anywhere on Earth. Your fingerprint, by the way, stays in the same box — it's stored as math on the chip, never as a picture, and never sent to us.
A copycat can't show a seal the authority vouched for comicbase.com, so your device notices something's off and won't stamp anything. And because your ring stays with you no matter what, there's simply nothing for the impostor to walk away with. That's the trap that catches phishing — the thing ordinary passwords and texted codes can't stop.
Ready to set yours up? It takes about ten seconds on your Sign-In and Security page — sign in, click Add a Passkey, and your device does the rest.
Add a Passkey