I started playing around with PAM when I set up this new laptop. I make use of the pam_u2f.so module to require a FIDO2 fob AND password for my logins. I even

I started playing around with PAM when I set up this new laptop. I make use of the pam_u2f.so module to require a FIDO2 fob AND password for my logins. I even configued it to have backup fobs allowed in case I lose my primary, secondary, etc. (which I store in exceedingly secure spaces). It's great that somebody would need both my password & my FIDO2 to access my laptop and there's no clear indication at login that the FIDO2 is required first if it isn't plugged in.