Yubikeys are by far the faster and most secure way to do login and two factor authentication today, by FAR. It's true that UX along platforms does not make it easy, but the TLDR is: - Get at least 2 new yubikeys, if you get three better. - Check that the firmware is at least 5.7.x - Set them to require PIN mandatory - Disable the modes you are not gonna use like TOTP - Use them with the FIDO2 mode enabled (that's basically putting a passkey inside a yubikey) - This way, you have phishing resistant login and 2fa and no risk of cloud totp apps. Yubikeys are great, but their customer support is not great, I would say if you have any question, let us know, we research them a lot from @opsek_io You also have our guide here: github.com/Opsek/Yubikeys-ch…