I haven't actually struggled much, here. I use hardware security (yubikeys) for everything that I can, and everything I can't generally uses TOTP, where I can u

I haven't actually struggled much, here. I use hardware security (yubikeys) for everything that I can, and everything I can't generally uses TOTP, where I can use keepassxc. The one that has been annoying is a client who insists on using Duo, but even they support literally automatically calling me and having me press "1" to authorize myself.