I looked into Yubikey but it seems absolutely impractical for day-to-day authentication unless you only use it for a finite amount of sites. For example, you'd

I looked into Yubikey but it seems absolutely impractical for day-to-day authentication unless you only use it for a finite amount of sites. For example, you'd want at least one backup. Maybe buried somewhere or in a safe deposit box. But the workflow for keeping it synced would be hilarious. Ever since then, I can't take anyone seriously on HN who says "we shouldn't have passwords, just hardware key fobs". Not to mention your authentication security doesn't matter when there's a customer support line an attacker can socially engineer.