so i moved all of my one-time codes for accounts that don’t support passkeys or hardware tokens to the yubikey and out of my password manager to make them an actually separate factor that behaves essentially like a yubikey itself

see i don't have them in my password manager because i want them to be separate factors even if it's Really Convenient otherwise

and keeping at least one yubikey on me at all times is trivial with my keychain backup, and i haven’t hit any snags with this setup in like a year of use

chat ^ this is really good advice