Everybody recommending Yubikey: because this [0], use that [1] instead. Amazon uses Gemalto [2] for AWS MFA, but I've had bad experience with it, and cannot recommend it.<p>[0]: <a href="https://plus.google.com/+KonstantinRyabitsev/posts/4a7RNxtt7vy" rel="nofollow">https://plus.google.com/+KonstantinRyabitsev/posts/4a7RNxtt7...</a><p>[1]: <a href="https://www.nitrokey.com/" rel="nofollow">https://www.nitrokey.com/</a><p>[2]: <a href="http://www.gemalto.com/" rel="nofollow">http://www.gemalto.com/</a>