diff --git a/src/api/core/webauthn.rs b/src/api/core/webauthn.rs
index 97c35556..7389939d 100644
--- a/src/api/core/webauthn.rs
+++ b/src/api/core/webauthn.rs
@@ -141,7 +141,7 @@ async fn post_webauthn_attestation_options(
     // requires the credential to be discoverable (resident) so the authenticator can find it
     // without the server providing allowCredentials.
     if let Some(asc) = challenge.public_key.authenticator_selection.as_mut() {
-        asc.user_verification = UserVerificationPolicy::Discouraged_DO_NOT_USE;
+        asc.user_verification = UserVerificationPolicy::Preferred;
         asc.require_resident_key = true;
         asc.resident_key = Some(webauthn_rs_proto::ResidentKeyRequirement::Required);
     }