@mgrondin I recommend you go full-on with Yubikeys. Get a USB-C Linux phone, a USB-C Yubikey, and you just need the Yubico Authenticator desktop app, and it's all done! A great experience, and crazy secure as well.