Please also bear in mind that it must be possible to create a backup of your second factor.
If you use a hardware token as a second factor, please make sure that there is a second one for emergencies!