Now

Immediate, low-risk fixes that remove the sharpest friction points.

• Harmonize password rules
• Improve recovery UX
• Clarify error messages
• Monitor login funnel
• Document login flows

Next

Passkey groundwork and the login-methods consolidation it depends on.

• Add passkey opt-in
• Create login methods screen
• Propose passkey after recovery
• Improve mobile login continuity

Later

A contextual, passwordless-first experience once adoption is proven.

• Passwordless-first experience
• Contextual login
• Device trust
• Progressive reduction of password dependency