Covers passkeys, FIDO2, WebAuthn, hardware-backed credentials, recovery design, and migration away from password-dependent authentication.