"Passwordless" is a huge group. Honestly, I personally like passwords. When using a password manager they are very secure and very convenient. Plus they are un

"Passwordless" is a huge group. Honestly, I personally like passwords. When using a password manager they are very secure and very convenient. Plus they are understandable, I know how to back them up, enter them in a different device and more. Everyone knows how they work and what to expect. Magic links can solve problems for users that don't have a password manager set up, but can be less convenient for those who do. Assuming you allow password resets via email anyway it is more secure. U2F/WebAuthn is much more secure but hard for users to manage right now. This is getting better with Apple, Google and Microsoft coming up with systems to sync the keys across browsers (as long as you stay within their ecosystem). Client certs are the most secure but lack infrastructure to make it convenient. It has basically been obsoleted by WebAuthn.