#carrvo[d]capjamesg: your Passkey implementation has me thinking: why not use a Passkey on the IdP side of IndieAuth? (Other than the obvious your users have not done so for themselves.) What difference is there between the service providing the option and the IdP providing it?