Really looking forward to playing around with this passkeys thing. If I understand it correctly, I can't implement it as the only authentication method for my website unless I'm okay with locking my users down to one single device?

Edit: to clarify, if my user set up passkey on their iPhone and that's the only method of authentication for my website, they just wouldn't be able to sign in if they lost that iPhone? The key can't be recovered, transferred or backed up? I'm okay with that (I own several yubikeys myself), just want to make sure I understand it correctly.