YubiKey

A closeup over the shoulder shot of a Corgi looking at his Windows PC. In his paw is a mobile phone displaying a TOTP app and code, and the computer's screen has a message "Please enter code generated by your authentication device."

What’s the Best Two-Factor Authentication Method?

Not all two-factor authentication works the same way. Some methods are more secure, some are more convenient, and some leave you open to sneaky attacks like SIM swapping. Here’s my breakdown of hardware keys, authenticator apps, texts, email, and voice codes so you can pick what fits you best.

YubiKey example of a USB 2FA device.

Passkeys and Hardware Keys

Passkeys and hardware authentication keys are completely different but partially related. You can use some, but not all, hardware keys as passkeys. I’ll clear up the confusion, and tell you what to look for.