Hardware fobs and tokens provide this functionality without adding an app to your phone.
Also see How Many Devices/Factors Should I Enroll?
See the Duo D-100 Token section of this page from IT Procurement and Licensing Solutions (ITPALS).
For more information, call ITPALS at 540-231-9517.
If a department needs assistance assigning a large number of D-100 tokens, they should contact 4Help by clicking Get Help on the 4Help portal.
Current products are listed at YubiKeys | Two-Factor Authentication for Secure Login
To enroll a YubiKey, see Enrolling a YubiKey as AES/OTP to Use in Any Browser. For groups or departments who want to enroll multiple tokens at once, please contact 4Help by clicking Get Help on the 4Help portal for assistance.
YubiKeys can be obtained from a variety of retail sources.
Tokens can become out of sync when the token is used to generate multiple codes but is not used to authenticate. Pressing the button repeatedly without using a code to log in may cause problems.
To fix this problem, follow the directions at Resync D-100.
Yubikeys can be renamed by selecting "Other options" and "Manage Devices" during Duo login. The Duo system does not allow you to rename any D-100 or software token since each token is assigned a unique set of characters.
Search words: two-factor, two step, multi-factor, 2FA, sign in, Duo, authentication, log in, login, MFA
KB0015773 - Enhanced Two-Factor Authentication (E2FA) DoIT Token Distribution Guidelines for Departments