Mark
I've used the IB Digital Security Card for years. I still need to use my username & password to get to that screen.
Because there are 224 mapped 3-character codes from among which 2 are offered each login I need to access the code-mapping card each time. For me this works pretty well because I [need to] have an image of the mapping table card immediately when/wherever I log on. This, of course, makes it pretty easy for someone to get to those codes but it's good enough for me.
I guess you could use just the original "hard card" or encrypt an image of the table to be more secure. I'm just hoping it'll be too complicated for the average hacker to figure out.
For many thousands of logins the process has run consistently smoothly.
Happy New Year!
:-)Shawn