[SahAssar]

Would it be possible to use this with something like webauthn/passkeys instead of passwords?

[kpdemetriou]

In principle, yes. In practise it's not widely supported (yet). Here's a relevant blog post: https://levischuck.com/blog/2023-02-prf-webauthn