> Enforce multi-factor authentication instead But in a way that your user won't lose everything if his usb-gadget fails. Also not in a way that it gets strong

> Enforce multi-factor authentication instead But in a way that your user won't lose everything if his usb-gadget fails. Also not in a way that it gets stronger than password and can be used alone to recover a password (sms, for example) Also not in a way that is written down in a paper and typed later. Also not in a way that prevents your user from using your software.