Any TOTP app works, for example Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden, Aegis or FreeOTP. The QR code is generated on your server, without going through a third-party service. Each user can also pick a security key such as a YubiKey, or their device biometrics (Windows Hello, Touch ID, Face ID).