Enrol a second device
Passkeys sync inside an ecosystem, so a broken phone is survivable. An iPhone plus a Windows PC is not — that is the gap a second credential closes. Both unwrap the same identity.
Download an encrypted backup
The only unrecoverable loss in the system. Articles, follows and pages all come back from relays; the key does not. Store this away from your devices.
Name guardians
If your key is ever lost, guardians can attest that a new one is you. This must be published before the loss — a pre-commitment added afterwards proves nothing, which is exactly when you would want it.
There is no account to recover. Your identity is your key. Guardians cannot restore it — they can only attest that a new key is the same person. That is social consensus, not cryptography, and it works because relying parties choose to honour it.
Removing a device does not revoke it. The identity key is unchanged, so a kept copy of the blob plus that authenticator still unwraps it. Real revocation means rotating to a new key.