Passkeys / passwordless login

Where supported, register a passkey under Profile after login.

Use the same device/browser for passkey sign-in. You can still use password + 2FA as backup.