Device-bound would be a nightmare. I don’t want to have to think about different credential for phone vs. laptop, etc.
Easy: it's the token on your physical keyring, right next to your house key and car key.
Easy: it's the token on your physical keyring, right next to your house key and car key.