Ask HN: How do you manage AWS root MFA in a remote work environment?

As offices are going more and more remote, how do you handle your AWS root 2 Factor credentials? We have typically used physical hardware keys that we store in a safe, but with employees leaving the city and the state, we are running low on in-city employees.

Is there a smart solution for multi factor authentication that can be shared between people who are remote?