Great (and detailed! and fun!) blog post by Lars Wirzenius on how to use U2F keys (like Yubikey) to enable two-factor auth for local logins in Debian.

Now to have some fun this weeked (hey, Lars, I've got backups thanks to obnam ;-))

Thanks a lot Lars!

P.S. Dear family members, I love you!