do they replace passwords, do they perform some auxiliary function, am I responsible for retaining them, what happens if they get lost, how do they work across devices
I am finding them absolutely impenetrable to understand which bodes poorly for them actually helping users