Why You Should Never Let a User Have Only One Passkey

Second passkey enrollment removes the most common passkey lockout: one credential on one device. Here is the two-credential rule and how to ship it.