When someone loses the device

Their password still works, so nobody is locked out. Passkeys stored in iCloud Keychain or Google Password Manager also follow the person to a replacement device on their own. If a device is genuinely lost, sign in with the password, remove the old passkey under Account, and enrol the new device. Staff can remove passkeys from the Devices screen if someone cannot get in to do it themselves.