I use a mix of - Google two-factor - Service-specific two-factor (e.g., Steam authenticator, which provides other features beyond TOTP) - Non time-based auth

I use a mix of - Google two-factor - Service-specific two-factor (e.g., Steam authenticator, which provides other features beyond TOTP) - Non time-based authenticators; Yubikeys are great, and appear to be made of some indestructible material that survives multiple trips through the wash.