username & password or oauth, with password reset.
Discussion
so what’s the difference between a passkey and a code in my passwords app.
Your passkey is tied to a hardware property
I kinda built that:
https://github.com/coracle-social/burrow
Bad idea unless you're souping it up with enclaves or multisig bunkers.