Comment by nottennis

Yes! WebAuthn, TOTP, Recovery Codes, MFA Policies - it’s all there :)

https://www.ory.sh/docs/guides/mfa/overview