Post #2923282

@brandonbutler@mastodon.social @rmondello@hachyderm.io I think every service should allow users to have a fully passwordless account. If I already have an account and I register a passkey — allow me to get rid of my password and other factors (like SMS or TOTP). If I lose access to all my passkeys (which I know won't happen) or I need to sign in where they aren't supported, I can use a “magic link” or e-mail recovery as a last resort. Also, it should be possible to register an account without ever creating a password.