Ive used the google authenticator:
http://support.google.com/accounts/bin/answer.py?hl=en&answer=1066447
Super easy and true 2factor (aka you are not running the secondary factor on the same pc as you are typing your password) Which they already have hacked.