Yubikey 5

Yubico's YubiKey 5 series hardware security keys became the standard for phishing-resistant MFA after Google's internal mandate that all 85,000 employees use hardware keys resulted in zero successful phishing attacks over two years. The FIDO2/WebAuthn standard they implement was adopted by Apple, Google, and Microsoft as the replacement for SMS-based 2FA, which is trivially bypassed by SIM-swapping attacks.