The loop
You need the account to reach the account.
A clean install asks for a password before it will give you a browser. The browser asks you to sign in before it will give you your passwords. The password manager wants a code from an app that lives on a phone you are also replacing.
Most people break the loop with the least safe thing in reach: a photo, a message they sent themselves, a note read out over a phone call.
A card breaks it differently. The one thing you must supply from memory is a password. Everything else is in your hand, on a surface that does not need an account, a signal or a charge.
In order
The first twenty minutes.
-
I
Phone first
Set up the phone before the computer. It is the reader for everything else.
-
II
Open the card
Hold the card to the phone, enter your password, and read the vault.
-
III
Bootstrap
Use the master password on the card to sign back into the password manager, then let it fill the rest.
-
IV
Leave it closed
Close the vault when you are done. Nothing stays on the phone.
One password from memory.
The rest from your pocket.