[mathematicaster]

I don't want to use passkeys until I can chose and verify that they are device bound.

[freeone3000]

KeepassXC famously has no network sync of any kind and supports passkeys.

[gruez]

Use a hardware token (eg. yubikey) then?