> Maybe the best strategy is a hardware key with printed backup code?
Or register more than one (preferably three) hardware key. It sidesteps all of these issues. They are very resilient and act as backups.
Or register more than one (preferably three) hardware key. It sidesteps all of these issues. They are very resilient and act as backups.
Presumably you would need to obtain all three keys every time you register a new user account on a website.