Hardware security key that stores private credentials and performs FIDO2/WebAuthn, OTP, and PIV operations, commonly used for exchange and admin MFA.