Duo, our Two-Step Login service, can be configured to use a HMAC-based One-Time Password (HOTP) token instead of Duo Push, Duo Mobile, or a Duo token.