To solve this I keep multiple yubikeys and track which ones are registered by tagging services with specific values in my password manager: "yubikeyA", "yubikeyB", etc.

I keep the backup yubikeys in safe places and periodically when they are available I search in keepassxc for entries tagged with A but not B, for example, and add the missing yubikey to that service.

The following search in keepassxc will show entries with the attribute "yubikeyA" but lacking "yubikeyD":

  attr:yubikeyB !attr:yubikeyD

To be safe from fires, natural catastropies, etc. you ideally place your 2fA devices to multiple people you trust, that you may have to travel to. But sadly, webauthn doesn't let you enroll devices without having direct access to them. So it makes this setup a bit harder than it could be.

> you ideally place your 2fA devices to multiple people you trust

That's a really good point. I keep a key with a friend in another city. When I visit them I use a query like the one above to determine any services that need to be registered with the normally unavailable key.

> So it makes this setup a bit harder than it could be.

I wish there was a way to enroll keys without them being present.

How long until the designers rethink the design and make it as thin/robust as credit cards. I think there are already some adopters of keyboards with a credit card chip reader, though not sure how mainstream popularity of it would be jump started.

Lots of keyboards with smart card readers already, for customers like the US DoD. They're not pretty though. Don't expect to see one on display at the Apple Store.

I see cheap ones on sale for 20 bucks or so. Cheaper than an NFC reader. Programmable "Java cards" are affordable.

Out of curiosity, how old was your yubikey? I have had one attached to my keyring since 2016, and it show no sign of breaking.

I got it as part of this promotion

https://arstechnica.com/staff/2018/01/introducing-ars-pro-th...

so I'd guess 2018. I guess I could have reinforced the hole and I probably still could.

The build quality is still awful and given all the varieties of badUSB out there I'm not enthusiastic about a USB connector that lacks a grounding shell. (That said, at our public library all of the Dell machines have AC current floating on the USB shells that give a gentle little shock... That might not be so gentle if you were standing in a puddle)