The yubikey won't help you if your passwords are weak or stored insecurely. This has a ladder effect on your 2fa including email. Id create a new bitwarden account with a new password with sufficient length - write it down on paper if you have to - store it on none of your devices, Also be sure to be using a protonmail account, if you already have one change the password using the method 👇 Id then use the password generator on bitwarden to make two new passwords at the max character length Twitter & Protonmail allow respectively. Save these passwords in bitwarden only. Id then enable a ubikey after that for convenience. If you still get pwned that means your computer is compromised - I would get a new one & start fresh meanwhile securing your IP address with a VPN at the router level, you'll need to purchase the router I'm speaking of.