Last Updated: November 21, 2025
Focus Areas
| Focus |
|---|
Prefer passkeys or hardware keys over SMS OTPs
|
Fallback to device-based one-time codes when needed
|
Commands & Queries
npm install @simplewebauthn/server
Add WebAuthn
verify-platform-authenticator
Check device support
send-otp --phone +1555
Deliver a fallback code
Summary
Enable passwordless flows while keeping a throttled fallback for devices.
💡 Pro Tip:
Support device-based passkeys and keep fallback OTP carefully throttled.