Yubikey: I always prefer a hardware-based two-factor authentication (2FA) option over a text message or software token. These tiny devices require participating services to verify that the USB device is present before access to the online account can be granted. My email and financial services all require my Yubikey be pressed before I can log into my accounts. You can also use these for GMail, KeePassXC, and many other options.