That implies people leave it plugged in, which is not advisable. Also ignores the fact that these keys have certain phishing protections. 2fa will fail when you

That implies people leave it plugged in, which is not advisable. Also ignores the fact that these keys have certain phishing protections. 2fa will fail when you're on a cloned phishing page, so you can't enter your totp code in a fake site. I use mine ALONGSIDE a traditional encrypted pw manager