It’s a great way to boost your security, and here’s how it works. These keys work in tandem with two-factor authentication (2FA), so you still need your password.