Post #2595476

@jsmall@infosec.exchange @rmondello@hachyderm.io Probably to avoid users locked after setting up solo Yubikey or signing in where they can’t use it. The TOTP is not used there with Passkey but Password+TOTP as alternate to Passkey. That said, if Microsoft Authenticator on one device is good, why not Passkey? Maybe it has fallback like SMS?