> What happens if my devices are gone? You follow whatever recovery procedures the service has, just like if you forgot your password Are you sure? If so, why?

> What happens if my devices are gone? You follow whatever recovery procedures the service has, just like if you forgot your password Are you sure? If so, why? Passkeys are advertised as a replacement for username + password + 2FA. Current practices generally allow for a password to be reset via email, but not MFA, as half the point of MFA is to protect against password resets. So the reset process for a passkey can’t be the same as a password otherwise you don’t have “real” MFA. I feel that account recovery is either going to get a lot harder (eg KYC for what would have been previously been an email), or services will enforce additional data collection (eg phone number) to aid recovery. Neither of these are good.