I pair of hardware keys (Token2, Yubico, etc) has the benefits from both worlds.