AC2-based approvals use hardware-bound passkeys, keeping credentials on the user’s device.

Continue reading at DailyCoin.