The Security settings page

Reach this page any time by clicking your email in the top-right corner. Sensitive changes here (removing your authenticator app, regenerating recovery codes, removing a passkey) are step-up-gated the same way admin actions are — if you're passkey-only, the browser's native passkey prompt appears at the moment you submit, not as a separate earlier step.