And that sounds fine, until you're traveling and your devices get stolen or lost. How, exactly, are you going to get into your email then, once passkeys become the only means of login? Because that moment is when you really do need to access your email, stat.

▲

mahboi 16 minutes ago | parent | next [-]

Nothing but a memorized password works in this scenario, right?

▲

jayknight 3 hours ago | parent | prev [-]

What services implement it like this? Don't services usually implement passkeys as a more secure alternative to a password, but password login is still available?

Some sites allow passkeys as an option for MFA, so that could be an issue if the passkey is your only MFA option and MFA is required. But I imagine email would pretty much always be a fallback.

	▲	mrweasel an hour ago \| parent \| next [-]
		Didn't Outlook.com famously rolled out passkeys with no recovery option and no option to sign in using username and password once enrolled. So if you lost your trusted device, you couldn't sign in, nor could Microsoft send you an email, because... Outlook.com is your email provider. I don't know if they fixed it, they probably did. Edit: Maybe not, because the recovery option at the end is just nuts: https://learn.microsoft.com/en-us/answers/questions/5454924/...
	▲	basch an hour ago \| parent \| prev [-]
		When was the last time you tried to log into something like Google, Apple, Microsoft etc without your phone nearby, on a fresh computer?