Passkeys are secure, but they're not two-factor authentication in and of themselves. I'll run the scenarios that explain why that is and when 2FA might be involved as well.
"I'm old" is a frustratingly common complaint. I talk a little about how that mindset might get in the way of the incredible opportunities technology presents.
Many people receive spam that looks like it comes from someone they know but is not from that person's email address. I'll take a look at what's going on and what you need to pay attention to.