Include 2FA seeds or backup codes, or put a backup yubikey somewhere recoverable offsite.