Until Amazon allows for far more secure multi-factor authentication, authenticator itself (which can be a YubiKey or Google Authenticator, etc)..