Do mandatory passkeys bypass traditional two-factor authentication?

What people tried

Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.

1. 1
   patching exploits as soon as possible
2. 2
   utilizing network segmentation
3. 3
   moving to strong encryption 2FA, and current best practice password policies
4. 4
   planning for failure as a foregone conclusion and planning for recovery
5. 5
   Using hardware passkeys like Yubico or Token2 that require a PIN
6. 6
   Falling back to traditional security methods like password reset by email where supported
7. 7
   Storing passkeys in password managers that require biometrics or a PIN

In their words

Unedited, grouped by where they were said, most upvoted first within each place, each linked to the thread it came from.