Google Authenticator is probably a solid option for 2FA, though I haven't looked into how it works at all.