[stavros]

WebAuthn credentials can be backed up, if you want. They can also be impossible to back up (and thus steal), if you want. It's up to you, which is more than I can say about passwords.

[jml7c5]

Do you know of any implementations that allow this? I've been looking around and even Yubikeys can't do it.

[pabs3]

See the virtual-fido project I posted elsewhere in the thread.

[jml7c5]

Thank you!