Using the "passkey on other device" flow, which usually involves QR codes.
What if my phone irreparably broke?
Then you use the "lost my passkey" process, which should be the same as the "forgot my password" process. Most services should treat passkeys like unphishable passwords.
Passkeys do not (and are not intended to) solve the problem of lost credentials.