Passkey recovery and lockout for relying parties: why passkeys cannot be reset, which recovery methods to offer, and how to design a two-credential safety net.