Has . If a device was lost, remove them; the user then signs in another way and can add new passkeys.
Linked to single sign-on (). Unlink if the person's identity at the provider changed; the next sign-on links again by verified email.
Lost phone and recovery codes? Resetting removes two-factor authentication from the account. If it's required, the user sets it up again at the next sign-in. Only do this after confirming who is asking.