What started out as some research into Windows Hello fingerprint authorization ended up with my Amazon order for a YubiKey 5 Nano. Logging on to Win10 is easy; however, good password use is not. Years ago, I set up two-factor authorization for most of my crucial web sign-ins. I even use 2fa regularly to sign onto a financial website. I know how this prevents the chance of most account hacks.
Using a phone app to obtain the temporary sign-in code seems a bit awkward. If I drop my phone into a lake or something, I'd not be able to access six or seven of my own accounts. So, I like the idea of a security key device that can 'live' right in a vacant USB port. Newer standards such as FIDO2 now mean that data needn't be stored on a server somewhere but right on a personally-owned encrypted key.
It should arrive tomorrow.