Description
LUKS encrypted partitions can be unlocked with a FIDO2-compatible authenticator instead of relying only on typed passphrases.
This affects disk access and boot or unlock workflows. Keep recovery credentials, because losing the authenticator or misconfiguring policy can lock users out.