This is also something I feel strongly about. I absolutley disdain any product or vendor that promotes "passwordless" (like bitwarden!). For typical web auth, y

This is also something I feel strongly about. I absolutley disdain any product or vendor that promotes "passwordless" (like bitwarden!). For typical web auth, you can't do better than passphrase+FIDO2. Device secrer only methods like passkeys and anything biometric+tpm without non-pin knowledge factor if auth are cancer. Skip thid bandwagon if you can help it.