Passkey: unlock with your device (face, fingerprint, or PIN). Authenticator app: enter the current 6-digit code.