I would stick to things like nitrokeys/yubikeys that have gone through rounds of side-channel attacks, research, and upgrades. The only one I can generally sug

I would stick to things like nitrokeys/yubikeys that have gone through rounds of side-channel attacks, research, and upgrades. The only one I can generally suggest for most people right now, in spite of it being closed, is the yubikey 4. Mostly because it can be configured to require a physical touch for each operation. Something a remote attacker can't do. I started putting some comparisons down here: https://github.com/lrvick/security-token-docs/blob/master/Devices.md https://github.com/lrvick/security-token-docs/blob/master/De...