passkey

https://docs.yubico.com/yesdk/users-manual/application-fido2/fido2-credentials.html fido2-credentials.html

There are two kinds of credentials: Discoverable (FIDO2 version 2.0: resident keys) Non-discoverable or server-side (FIDO2 version 2.0: non-resident credentials)

• non-resident keys are the U2F keys essentially

  • "Non-discoverable credentials…the RP must first identify the user who is being authenticated"

  • ohh that's why discoverable can do non-2FA

plus, passkeys seemingly come with a requirement for user authentication