These are NZServers suggestions
Please carry out your own research
Any 2FA is better than none.
Google Authenticator does a great job but does not sync across all devices.
If you have a cellphone and you lose this you can disable the app from another device plus you can opt to use a pin to access the app.
It works well except the desktop version you have to input the code as there is no QR reader.
If you use a mobile device this will scan the code and then automatically back to any other device you connect authy to.