Maybe worth looking into getting some Yubikeys (get a spare, it's just easier) and using those in combination with their 2FA app. They can do some other neat tr

Maybe worth looking into getting some Yubikeys (get a spare, it's just easier) and using those in combination with their 2FA app. They can do some other neat tricks as well with SSH and PGP. Clarification edit: they offer a 2FA token app which you unlock with your hardware key, which is separate and can be used in conjunction with hardware token authentication with any service that offers it. Note that their cheaper blue or newer biometric keys don't support all the same things their mainline black ones do, but should work just fine. No affiliation, just happy with their products and had a really awesome (business) customer support experience where they replaced several broken (through my own fault) keys for free.