What is best 2FA practice with authenticator apps and Yubikeys?

Hello ​@voyager2026! 👋

Thanks for the question! Security Keys can be arguably considered the gold standard of multi-factor authentication since they:

• Require physical access/possession. 
• Are a completely siloed second factor that isn’t part of your other devices.
• Only work on the legitimate website/app that you’re trying to sign into which makes them more phishing resistant than an authenticator app. 

If you choose to remove the authenticator app and just use your security keys then make sure that the keys feature connections that will work with all of your devices (for example, a USB-C port). You should have at least two different second factors added to your account, whether it's two security keys or a security key and a TOTP authenticator app just in case you lose one security key or it breaks.

We have some helpful blog articles with some additional information here: 

• Protecting your 1Password account with multi factor authentication
• Hardware security keys: What are they, and should you use one?

I hope that helps! 

-Dave