I noticed that the option to disable the Authenticator App is finally there (Oct 2026). Accounts can now rely exclusively on a security key (limited to 4).
There is a warning, though: "Some Proton apps may not support security keys yet. If you turn off authenticator app 2FA, you may not be able to sign in to those apps."
I think some of the VPN clients on some platforms can't use the FIDO2 token. Also, please note that the Tor Browser cannot use them either.
I noticed that the option to disable the Authenticator App is finally there (Oct 2026). Accounts can now rely exclusively on a security key (limited to 4).
There is a warning, though: "Some Proton apps may not support security keys yet. If you turn off authenticator app 2FA, you may not be able to sign in to those apps."
I think some of the VPN clients on some platforms can't use the FIDO2 token. Also, please note that the Tor Browser cannot use them either.