I want to order a 2FA key (like yubikey) online and I want to know if someone could make a duplicate of whatever key I order during shipping. I don't want to discuss if someone could access my package. I want to know if someone is able to access my package during shipping or even after I get it, could they make a duplicate of my key?
And if they can, and they also have my password, that means they can also access my account (Gmail) after I setup the 2FA authentication right? What about locking me out of my account?
And can you tell me what key would be compatible with multiple online accounts and preferably offline use on Linux (Ubuntu) as well?