[vitd]

I see that Charles Schwab is listed as having 2-factor authentication via hardware token, and Citibank is listed as not having it. Both of these are only partially correct. For example, Charles Schwab allows it on their brokerage accounts, but if your company sets up your 401k with them, then it's not supported.

Citibank does support it, but only on their "Gold" accounts.