Each passkey that can sign in. Revoking one signs that device out at once.
To add a device, ask Keel for an enrollment link (it needs your authenticator code).
