You’ll want at least two and preferably more FIDO2 keys. Keys can and do fail, and can be lost.
Which particular keys are appropriate depend on what combination of Apple (and other) gear you have.
With an iPhone 15 Pro, a key with either or both USB-C and NFC connectivity will work.
This and enabling Recovery Key will take over complete control of two-factor authentication and of password reset.
The keys must be FIDO-certified (FIDO2) minimally, and there are other keys with rather more added options than that.
Prices range from roughly USD$20 to USD$75, depending in brand, connectors, and added features beyond FIDO.
Protocols beyond FIDO (FIDO2) can be useful for other authentication applications, but are not needed by Apple.
Yubikey C NFC versus multi-protocol Yubikey 5C NFC, for instance. Both work with Apple. The latter has added protocols.
You’ll minimally want two keys, and likely want more than that.