I have a yubikey and use their pam-module for 2FA on sudo and ssh. Took a bit of time to configure, but now it works like charm: wiki.archlinux.org/title/YubiKey#Linux_user_authe…