Password Manager with easy Android Integration (and YubiKey)

victor2

Another vote for Bitwarden here. To use yubikey you would need the premium version and a yubikey (& phone) with NFC, but it's only US$10 per year. That also has the added advantage that you can assign somebody to have "Emergency Access". They must be a Bitwarden user, but it can be the free version. Through their account, they request access to yours, which you must have already enabled. If you don't deny access by email reply to Bitwarden within a number of hours you define, they are given access to your vault.
I have that arrangement with my DD. I have just about everything in my vault, including important documents, and she doesn't even need to know my password. I just don't have to be around or able to respond to an email.

NorthernGuy

A lot of interesting and good advice here; this is clearly a very complex subject with personal preferences too.  Re the post earlier that I was unwilling to change and let go of YubiKey, googling today says authentication that lives on a removable hardware device (e.g. my seemingly unpopular YubiKeys) is inherently safer than authenticator software running on in your phone's memory, which is thereby more vulnerable to interference. 

The Google response to 'Is a YubiKey safer than an authenticator' starts by saying:

Yes, a YubiKey is generally safer than a standard authenticator app (like Google Authenticator) because its physical hardware and FIDO standards provide superior phishing resistance, stopping sophisticated attacks where apps might fail, though apps are still very secure and convenient for most users. YubiKeys use origin-bound challenges, meaning the code is tied to the specific site, preventing attackers from tricking you into entering it on a fake site, a major weakness of time-based (TOTP) apps. 

Before going on to the detail you can peruse if interested.  Is this statement not accepted by you?

Vitor

I agree Yubikey is the gold standard, however I'm happy that defense in depth with Android settings etc means Authenticator + biometrics is good enough for me on the mobi.

Eyeful

Security keys are safer than Authenticator apps.
Safer still are passkeys.

PRAISETHESUN

There's pretty much always going to be a trade-off between security and convenience. If you want to continue to use your yubikey then I'd expect there to be some friction for the process. Any MFA is better than no MFA, and IMO a properly secured phone with an authenticator app, alongside a properly secured PWM, is more than secure enough for a normal person.

For what it's worth, another +1 from me for Bitwarden premium to support what you're asking for.