diff --git a/app/enroll/page.tsx b/app/enroll/page.tsx
index c7c86c0..1f7f914 100644
--- a/app/enroll/page.tsx
+++ b/app/enroll/page.tsx
@@ -58,6 +58,9 @@ export default function EnrollPage() {
 				requireResidentKey: false,
 				userVerification: "discouraged",
 			};
+			// Explicitly request security-key flow so Chrome 116+ doesn't show
+			// the passkey dialog (which errors when an existing credential is present)
+			(opts as Record<string, unknown>).hints = ["security-key"];
 			if (opts.excludeCredentials) {
 				opts.excludeCredentials = opts.excludeCredentials.map(
 					(c: { id: string; type: string; transports?: string[] }) => ({