Re:Google announces passwordless by default: Make the switch...
by blitzar on Tuesday October 10, 2023 @06:44PM
(#37838713)
I think you answered your own question! The three key is optimum for ease of rotating (or so you can carry one on person) - but if your house burns down with your phone in it - you will lose anything set up since your last offsite rotation.
Sounds paranoid / crazy - but I have 0 anxiety about being locked out of an account that matters.
I suppose every time one makes an account one can register the two on-site keys, and then rotate one of your on-site key to off-site and take the off-site key home with you, and then finally register it.
Maybe I should get a third key...