Somestimes I press on my yubikey accidentally and it writes the token on the screen and even sends automatically to the person I'm talking to on some chat, because it presses enter. This happened several times to me, it weites something like xcvcvc....457 and sends.
My yubikey is, as far as I know, a 2FA on LastPass, so it cannot be used to log in by itself alone (how do I verify that?).
Anyways, suppose someone has my lastpass password and access to an old authentication token that I sent previously accidentally, but that I re-logged with a newer on on LastPass. Will this person be able to log in to my account? In other words, are these like a rolling code where the old ones get invalidated?
What if I have 3 yubikeys setted up in my LastPass as 2FA, and I accidentally send a code from yubikey 1, but log with yubikey 3? Will this invalidate yubikey 1's accidental token?