Passwords & 2FA
YubiKey
paidA physical key requires real presence to sign in: it won’t be fooled by a fake login page, unlike SMS or a code.
Recommended in the checklist
Passwords & 2FA →
- Use a physical security key on critical accounts
- Don’t host 2FA inside the manager, diversify your methods
Physical security →
- Keep backup codes and security keys under lock