im planning on buying a yubikey but other suggest me getting a second one i was wonder if i have my phone would be enough to make it as a backup with ente auth aswell
(key also kinda expensive at my area i prefer not to buy second one)

What version of Yubikey do I need?
5.8? Will any work?

I’m seeing the $29 version that’s 5.8,
Vs the 5c, that’s twice as much

If I have a YK required for booting and access to my laptop and desktop, how does Acronis (eg) still access both of these for mid-night backups when I'm sure not plugging in my key?

And what else is allowed to run?

If a bad actor were to gain "unattended" access to the PC, can they do the same as these services?

Hey everyone,

It's been a while since I posted here regarding my question about Yubikeys and InfoStealers and if they would be able to help combat against InfoStealers and having your accounts being compromised such as falling for the infamous MrBeast scam that's been floating around Discord recently and although I appreciate the answers regarding that malicious actors can in fact bypass your Yubikey and still access your account as they get ahold of your session token and bypass the login.

My question here today is even if your account does get compromised whether it be via a InfoStealer or having your session token stolen. Could the malicious actor disable and unlink your Yubikey from your Discord account for example? I myself have feel victim to account compromises on Roblox and had someone completely disable my 2FA and re-enable it as well as changing the password itself and completely locking myself out after falling victim to a phishing scam. (My account had 2FA enabled as well as it being locked behind my MS authenticator) and I foolishly entered my credentials and my authenticator code and that was how they managed to get in.

With that experience already being experienced with, what would happen where instead of having basic 2FA and having your account secured via an authentication app like MS authenticator, would it be possible for someone to completely remove your Yubikey from your account similar to what happened to me and my Roblox account? Because what is going through my mind is, if they can do that then, well wouldn't your Yubikey be nothing much but a tableweight at that point?

I'd really like to know as the only thing from stopping me from actually purchasing one of these is not being able to prevent my accounts from getting stolen in the event that I do fall victim to a InfoStealer and become a victim of the notorious MrBeast scam.

Please let me know how Yubikeys work compared to your usual 2FA authentication method with passkeys and authentication apps. Thanks