A friend of mine and all his colleagues are using OnlyKey (pricey). I use a Ledger Nano S for U2F/webauthn. These two are requiring a PIN to register/auth.