Google's USB-C Titan hardware security key works on Android phones too - CNET

The key is designed to keep attackers at bay, even if they have your username and password.