In order for this plan to work, the token manufacturer would have to be able to store your secrets, which means you uploading your secrets, which defeats the pu

In order for this plan to work, the token manufacturer would have to be able to store your secrets, which means you uploading your secrets, which defeats the purpose of physical tokens. Just use a cell phone number one-time-code or authenticator app with time-based-codes instead.