I stopped using passwords and switched to the same physical login protection Google uses internally for daily accounts.

I've now spent a significant amount of effort exploring the ways to use yubikeys that extend beyond the basic web authentication. These are incredibly capable devices but you have to know what you're ...