I use a Trezor, only for stuff like this. I use it for WebAuthN, gpg, ssh, (and via gpg) password management. Unlike Yubikey you can import an externally gener

I use a Trezor, only for stuff like this. I use it for WebAuthN, gpg, ssh, (and via gpg) password management. Unlike Yubikey you can import an externally generated seed so you can replace a Trezor if it gets lost/breaks without registering multiple devices.