How we boosted WebAuthn adoption from 20 percent to 93 percent in two days

This post details the technical and operational aspects of mandating WebAuthn/FIDO2 devices for company-wide MFA within a two-day timeframe. It covers the rationale for choosing WebAuthn over other MFA methods (TOTP, push notifications) due to its phishing resistance and public key cryptography. The implementation details include leveraging built-in Touch ID on Macs, facilitating YubiKeys for Linux users and those preferring them, and crucially, the discovery and utilization of QR code scanning for self-service enrollment of new devices. The communication strategy and the use of a Slack bot to drive adoption are also described.