[amaccuish]

I believe it works via the TPM or Secure Enclave in the computer or phone. The keys are stored securely there.