What happens if your only YubiKey gets lost, stolen, or disappears into the laundry? That’s exactly how people end up locked out of their own accounts, and it’s why I always recommend setting up multiple hardware security keys per account. In this video, I walk you through the “correct” way to do it: one primary key that you use every day, and one backup key that stays stored somewhere safe (like a home safe, lockbox, or trusted offsite spot). I also break down what a YubiKey actually is, how the login flow works, and why FIDO2/WebAuthn makes these keys phishing-resistant. I compare YubiKeys to SMS codes (please don’t rely on those) and authenticator apps (better, but still phishable and annoying to recover if your phone dies or gets wiped). Then I show you how to register two keys on real services—Proton and Bitwarden—plus what that “random string” is when you use Yubico OTP in Bitwarden (it’s not random; it’s a cryptographic signature for your key). I also share a viewer tip that made me pause: saving 2FA setup QR codes can be risky if a site reuses the same QR code forever. Finally, I make you do the most important step: test both keys before you store the backup.