Google actually lets you use a physical key to protect your account.

https://support.google.com/accounts/answer/6103534?hl=en&ref...