Yubikeys are good, but be sure to keep a good backup of your recovery codes. I use a yubikey to unlock my laptop. Passwords are in my safe.