I was surprised this morning to be able to login without having to use my Yubikey. I have 2 factor authentication turned on and previously had to touch my Yubikey to enter the site.
I logged out and typed in random characters into the 2 factor field just to check and it still logged me in?
Have you disabled 2 factor authentication?
Cheers,
Dave