Both satisfy DEA two-factor requirements. A hardware token is a small physical key fob that generates a code, good for providers who want a dedicated device kept on a lanyard or in a drawer. The Authy app runs on your phone and approves prescriptions with a push notification, good for providers who want one less thing to carry. Pick per provider; you can mix and match within a practice.