My LastPass vault is protected with a master password. If I lose all my devices, I can restore from online using that. I’m just wondering how that would work in a password less schéma.
We (IDPs in general, I can't quite speak to FIDO work) still have other account recovery methods, like email (eg Facebook lets you do fast IDV for password reset if you have a Gmail account associated). Part of this is a turtle tower - there's always going to be some more definitive IDP that we ask you to associate and fall back to, and hopefully that IDP will do the same. Our work (MSFT Identity) on decentralized ID in particular needs to take this into account - who's the last turtle there?
What happens when you use iOS's password generator and manager and you lose or break your phone? Or the same but with LastPass?
You've either synced it or you lose all your passwords.