Comment by jgrahamc

I find the following has the right combination of mental model and security for me:

1. A password manager that generates my passwords stored on an external USB key (which is itself encrypted). I use KeepPassXC.

2. More than one Yubikey doing U2F.

I know how to backup #1 and I have more than one of #2 to handle losing a Yubikey. #2 gives me phishing protection.