Login Security

Hello:

Long time Windows user moving to the Mini M2. Very nice little computer and the learning curve has not been too steep.

One thing I have not been able to resolve is login security. I trust Keychain to be safe, but the scenario of a stolen computer is what concerns me - if the login password is hacked, the hacker has access to all passwords too.

If I set a really strong password for login, that also becomes the permissions password, which becomes cumbersome when utilizing the computer. And, as far as I can tell, there is no option to use a different (simpler) permissions password.

As far as I can tell, there is no option to set up 2FA for login. I looked at Yubikey as an option, but there seems to be some question that it works on the Mini and I didn't want to take a chance on locking up the computer.

Any ideas, for a newbie, on how to make the login more secure are appreciated.

Thanks, Lee