Well a Yubikey can require a password/PIN. So having your device + knowing the password.