YubiKey

YubiKey is a line of security keys manufactured by Yubico. They are hardware-based 2FA devices designed to protect access to computers, networks, and online services that supports one-time passwords (OTP), public-key cryptography, and authentication, and the Universal 2nd Factor (U2F) and FIDO2 protocols. They come in a handful of form factors, but the key feature you need is on all of them: Someone has to be there - in person - to touch the button and release the key, or you shall not pass.

There are a lot of things made for these keys, but the two main packages you are looking for is YubiKey Manager and YubiKey Authenticator.

There are all sorts of other official tools for various other things you can bolt your YubiKey into, like your login screen and enterprise networks.

In Linux, you can use Yubi authentication in place of password authentication on the sudo command (and others).

fill in later