And you enroll them all for each service?

Yes. It's not super fun, but I only need to do it once per service.

I even built a Solo 2 key into my framework laptop:

https://imgz.org/i6Gn2fyS/

That's incredible. I can't imagine the Framework people ever thought of this particular extension card use case.

I wonder if something like this could sell on their third-party extension card store.

Maybe they didn't think of it, but they certainly made it happen! The fact that they provide customizable 3D-printable models in a GitHub repo is fantastic, I love the laptop and the company.

I don't really want to bother selling it, but I'll upload it to Printables in case anyone wants it.

But what are your steps if you loose device1? Log into each service with device2 and unenroll device1’s key?

Yes, or, more likely, just do nothing because it needs a PIN that nobody else has.

Yes, for each important service. Primary email, financial, dns, etc. others I user long random passwords.