For GnuPG I use this hardware: https://begriffs.com/posts/2017-05-17-linux-workstation-guid...

For U2A two-factor auth I use a little Yubikey that is dedicated just for that and fits comfortably on a keychain. https://www.yubico.com/products/yubikey-hardware/fido-u2f-se...