Hacker News Reader

For me, https://www.passwordstore.org/ and a Yubikey is the best setup I've tried.

It's quite a lot of work to set it up though.

So, how does this work on a smart device? Do you plug the Yubikey into an OTG, or do you just not access anything on your phone?

Typically you can load the key (from the ubikey) into google authenticator too on your phone

YubiKey via USB, OpenKeychain, and zeapo/Android-Password-Store.

What if you lose your Yubikey?

The same thing that happens when you lose any other key; either 1) dig up the spare, 2) break the lock, or 3) lose access.

See also best practices for backing up OpenPGP keys.