I believe that functionality is opt-in (or a very prominent opt-out process), but yes I would say you no longer &quot;have&quot; the key, but are turning it into &quot;knowing&quot; a password required to retrieve the key.<p>Still Zero-Knowledge, but no longer really 2FA.<p>I still us Authy for a lot of my keys because (1) I have that cloud function off and (2) the UI is better than GA IMHO.