[masfuerte]

You don't need a phone or a hardware token. e.g. https://github.com/rsc/2fa