For those who use a Yubikey, how important is it to have a backup one? Can you just use the backup OTP codes if something happens to it?

@northerner depends on what it's connected to

Quite a few SSO and other tools I use let you set up more than one TFA device

@northerner You always want different methods as well. An app, an email/SMS, backup codes, one or multiple hardware devices (including Google Chrome acting as one now)

@northerner It depends on what the result would be of its loss/failure.

There's a big difference between having to now enter in a longer password or have an account reset and completely losing access to the encryption keys for all your backup drives.