YubiKey 5
Hardware security key supporting FIDO2, WebAuthn, OTP, PIV smart card, and OpenPGP.
Brax recommends
Primary hardware second factor for accounts, SSH, and PGP for a wide range of users.
The YubiKey 5 series adds strong phishing-resistant authentication to accounts and can also hold PGP and PIV credentials on-device. Firmware is not user-updatable, which is a deliberate security trade-off.