> So don't use them for 2-factor authentication anywhere. I use multiple forms of 2-factor auth, so if I lose my phone, I can still access my accounts. I use:

> So don't use them for 2-factor authentication anywhere. I use multiple forms of 2-factor auth, so if I lose my phone, I can still access my accounts. I use: * Five (5) physical U2F keys – which can authenticate you into Google on Chrome. The keys are spread out between home, office, trusted family members, and elsewhere; so if I lose one key, I still have other(s) to fall back upon. * Backup codes (stored in a safe place) * Phone (Google Authenticator app + voice + SMS)