I'd like to point out that U2F has been superseded by WebAuthn[0]. It's backwards compatible with U2F keys and doesn't require a bunch of JS since support is bu

I'd like to point out that U2F has been superseded by WebAuthn[0]. It's backwards compatible with U2F keys and doesn't require a bunch of JS since support is built into browsers[1]. Some hard/software combinations allow you to the platform native authenticators instead of an external key, such Chrome/Android biometrics, Chrome/Macbook Touch ID and Edge/Windows Hello biometrics. Besides 2FA it can also be used to build a passwordless login experience[2]. [0]: https://www.w3.org/TR/webauthn/ https://www.w3.org/TR/webauthn/ [1]: https://caniuse.com/#feat=webauthn https://caniuse.com/#feat=webauthn [2]: https://www.yubico.com/2018/08/10-things-youve-been-wondering-about-fido2-webauthn-and-a-passwordless-world/ https://www.yubico.com/2018/08/10-things-youve-been-wonderin...