They offer a physical token if you call and ask for it. They also offer the option of using some Symantec app as a second factor but I've never tried that.

https://www.schwab.com/help/two-factor-authentication