The security key here isn’t used for every login. So if you were to lose both it’s not like your account is completely disabled and all data lost. I think you c

The security key here isn’t used for every login. So if you were to lose both it’s not like your account is completely disabled and all data lost. I think you can even use still use your Recovery Code. The Security Key here primarily replaces the 2FA authentication method for adding new devices to your account. From Apple’s own documentation: When you use Security Keys for Apple ID, you need a trusted device or a security key to: - Sign in with your Apple ID on a new device or on the web - Reset your Apple ID password or unlock your Apple ID - Add additional security keys or remove a security key I believe if you lose both you can still add another as long as you have access to a device that’s still logged in. The biggest hole in Apple’s security model, and one which has been documented to have been exploited many times, is people using phishing tactics to get the 6-digit 2FA code to gain iCloud access, adding a new device, then downloading the unencrypted backup from the victims primary device from iCloud. Security Keys and E2EE now make this impossible.