Passwords & 2FA
YubiKey
A physical key requires real presence to sign in: it won’t be fooled by a fake login page, unlike SMS or a code.
Recommended in the checklist
Passwords & 2FA
- Use a physical security key on critical accounts
- Don’t host 2FA inside the manager, diversify your methods
Physical security
- Keep backup codes and security keys under lock