From 6cff2f6d600c0af4eeb8e786a8d7db9efcc94f27 Mon Sep 17 00:00:00 2001
From: Willow C Reed <willow@willowidk.dev>
Date: Sat, 8 Aug 2026 15:41:33 -0600
Subject: [PATCH] chore: fix passkeys so they can function properly as a second
 factor

---
 .../components/dialogs/passkey-onboarding-dialog.svelte  | 3 ++-
 apps/dashboard/src/routes/login/+page.svelte             | 9 ++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/apps/dashboard/src/lib/components/dialogs/passkey-onboarding-dialog.svelte b/apps/dashboard/src/lib/components/dialogs/passkey-onboarding-dialog.svelte
index 565c53d..149f46a 100644
--- a/apps/dashboard/src/lib/components/dialogs/passkey-onboarding-dialog.svelte
+++ b/apps/dashboard/src/lib/components/dialogs/passkey-onboarding-dialog.svelte
@@ -47,7 +47,8 @@
 		<Dialog.Header>
 			<Dialog.Title>Add Passkey</Dialog.Title>
 			<Dialog.Description>
-				Register a passkey for passwordless sign-in. Your browser will prompt you to authenticate.
+				Use a passkey for passwordless sign-in or as a second factor after your password. Your
+				browser will prompt you to authenticate.
 			</Dialog.Description>
 		</Dialog.Header>
 
diff --git a/apps/dashboard/src/routes/login/+page.svelte b/apps/dashboard/src/routes/login/+page.svelte
index 7ffdd3c..15c0e87 100644
--- a/apps/dashboard/src/routes/login/+page.svelte
+++ b/apps/dashboard/src/routes/login/+page.svelte
@@ -69,15 +69,14 @@
 
 		if (loginData?.twoFactorRedirect) {
 			const methods = loginData.twoFactorMethods;
-			const missingMethodsMeansTotp = !methods || methods.includes('totp');
 
-			if (missingMethodsMeansTotp) {
-				goto(twoFactorHref('totp'));
+			if (methods?.includes('passkey')) {
+				goto(twoFactorHref('passkey'));
 				return;
 			}
 
-			if (methods.includes('passkey')) {
-				goto(twoFactorHref('passkey'));
+			if (!methods || methods.includes('totp')) {
+				goto(twoFactorHref('totp'));
 				return;
 			}
 		}