Can we use bi-key authentication with dovecot & thunderbird?

I run the dovecot imap server and use thunderbird as frontend. The access is password protected, and I see zillion login attempts with leaked passwords. I would like to switch to bi-key authentication and if possible with a FIDO2 physical key too. Is this possible ? I currently use bi-keys for ssh authentication and start to use a FIDO2 physical key.