Passwordless sign-in setup. Register two DIFFERENT authenticators — one hardware key and one synced passkey. The second is your recovery: with one credential, losing it is lockout.
Hardware: insert the YubiKey and tap it. If it says already registered, you touched Touch ID — that's the passkey refusing; use the physical key instead.