I have a little widget similar to this hooked on my keychain for AWS: https://safenet.gemalto.com/multi-factor-authentication/auth...

And for other services? I need 2FA for couple dozen different logins. And not all of them support such hardware devices. Mobile phone is needed.

Google Authenticator works fine with an offline device, and SMS-based 2FA is insecure.

Right, but you still need a device. So you can just switch your smartphone into airplane mode and only turn the airplane mode when you want to make a phone call / use wifi.

You need a device, but you don't need a cellphone plan.

Not OP, but I suppose one could set up SMS based 2FA on a cell phone that is not a smart phone for most major services out there.

I see. Well, the way I understood it he got rid of mobile phone altogether. So no smartphone, no dumb phone (like old Nokia). That's why I wondered how do you deal with 2FA.