Sure, SmartCards are two-factor, unless the token has a hardware&#x2F;software bug.<p>This has happened in the past[1]. I&#x27;m a huge fan of the CCID&#x2F;GPG capabilities of the YubiKey, but I&#x27;m not sure they should be used in isolation in high-security environments.<p>[1]: <a href="https:&#x2F;&#x2F;developers.yubico.com&#x2F;ykneo-openpgp&#x2F;SecurityAdvisory%202015-04-14.html" rel="nofollow">https:&#x2F;&#x2F;developers.yubico.com&#x2F;ykneo-openpgp&#x2F;SecurityAdvisory...</a>