I don't think that's true.

You can store them in keepassxc which can be accessed with a password.

I think it's "have" + "know" or "are".

So you have the device with the passkey, and know the unlock pin or are the person with the biometrics.