I use a Verisign (Symantec?) VIP token on my account. Several years ago they actually mailed me the key fob, later they let me give them my mobile token's serial number (generated by python-vipaccess) so I could use that instead.