or perhaps (given discussion in internal chat on how to make the process easier for the user):
Time-Based Tokens
example: Google Authenticator
+ Add TOTP Authenticator
Portable Security Keys
example: Yubikey, U2F Hardware Tokens
+ Add Security Key
Platform Security Keys
example: Windows Hello, Apple FaceID
+ Add Security Key