Use a passkey for a phishing-resistant sign-in. Password and authenticator access remains temporarily available for migration.