When Discord developed its web authentication framework, it retrofitted WebAuthn (Passkey) features into its pre-existing, rigid Multi-Factor Authentication (MFA) system. True passwordless passkeys rely on a mechanism called Discoverable Credentials (Resident Keys), where the credential itself holds user identity information.
Discord’s website fails to request discoverable credentials when saving a key. Instead, it generates a traditional, non-discoverable MFA Security Key payload. When you attempt a passwordless login via the direct "Sign in with Passkey instead" button, the website looks for a passwordless file that was never created, completely bricking the native browser authentication flow on mobile and desktop platforms alike.
Discord does not recognize FIDO2 security keys as "passkeys" and uses a distinct login flow. While passkeys offer passwordless authentication, Discord requires users to first enter their credentials before using FID