FIDO2-compliant hardware security tokens like the YubiKey 5. Can be coupled to Android devices via NFC. Presumably there is downward compatibility between WebAu

FIDO2-compliant hardware security tokens like the YubiKey 5. Can be coupled to Android devices via NFC. Presumably there is downward compatibility between WebAuthn/FIDO2 and FIDO V1 so older FIDO tokens might work as well. Note, however, that an external hardware token is not _required_ by WebAuthn/FIDO2. The "Authenticator" can be implemented purely in software on the mobile device, too. The FIDO Alliance's certification program has different assurance levels commensurate with what amount of hardware security the Authenticator is backed by. Unfortunately, the press release seems to not mention which level or levels this general "Android FIDO2 certificate" addresses. It would of course be good if an Authenticator implementation delivered with the OS makes maximal use of any hardware security features that are built into the smartphone anyway.