One IT dept. uses "passkey" to refer to the MS authenticator app. That would be the app that when a thief steals a mobile device, the Web site sends a code to the thief to enter it into the device the thief now possesses. Same stupidity.