On 09 Jun 2021, August Abolins said the following...
 
 SD> With the hundreds of passwords I use and my server(s), a
 SD> Yubikey would be a big help for me.

 AA> Hundreds?  Really?

I've use a password manager for several years & have accumulated just over 400
items in mine.

Just scrolling through, it's a lot of "dumb" things like random websites
where you need to create an account to order something or to leave a comment.

Other things are more important like my Gmail account.  For most of my
accounts I don't know my password.  I've used my password manager to generate
the password and it's stored in there.

 AA> I'd be afraid that the such a yubikey device gets electrically  
 AA> compromised, or lost.

That's where account recovery comes in.  If you forget your password you can
reset it.  If your MFA token (whether physical or digital) can't be used, you
are usually given recovery codes, which I then save in my password manager.

Some sites are a PITA to recover from MFA.  Like Linkedin for example I had
to scan my driver's license & sent it to them to get my account back.  Years
later they had a data breach, so I feel super good about that decision...


Jay

--- Mystic BBS v1.12 A46 2020/08/26 (Raspberry Pi/32)
 * Origin: Northern Realms (618:500/23)