> but if you want real security, use a security token (e.g. yubikey) or some other smartcard solution. In the past I thought about it but my head kept coming u

> but if you want real security, use a security token (e.g. yubikey) or some other smartcard solution. In the past I thought about it but my head kept coming up with ridiculous scenarios like "what if your yubikey breaks, AND your backup yubikey breaks?!". I'll just keep using KeePassXC database (backed up in multiple places).