I use a yubico key which holds all my Google Auth 2FA secrets. A yubico app generates the 2FA codes. I also have a hardcopy of all secrets. An additional adv

I use a yubico key which holds all my Google Auth 2FA secrets. A yubico app generates the 2FA codes. I also have a hardcopy of all secrets. An additional advantage is that the yubico key is protected with a PIN code. Works great for me.