YubiKeys coupled with Duo MFA provide an easily understood, secure solution.