YubiKey 5 Series
The industry standard in hardware security keys. Supports FIDO2, WebAuthn, U2F, PIV, TOTP, and OpenPGP. Available in USB-A, USB-C, NFC, and Lightning form factors. Virtually indestructible, waterproof, and crush-resistant. Used by Google, Facebook, and government agencies for phishing-proof authentication. From $25.