[notlukesky]

But in every FIDO2 registration there is a pop up for both Android phones and USB security keys with the API call. The prompt for registering a device shows both "Add a new Android phone" or "USB security key". When you click on "Add a new Android phone"it leads to a barcode that when you scan nothing happens. Seems real confusing especially if they want broader adoption.

[agl]

2nd-factor WebAuthn should work fine with Android phones today. Any Android phone with a current version of Play Services and Chrome should be able to scan the QR code, if it doesn't work then it's a bug (or, at least, an old QR scanner).

When you say "nothing happens": what's the QR scanner? Do you have Chrome installed on the device? What are the app versions (from Settings) of Play Services and Chrome?