Currently, there may be a way to implement that if you use Authy, but ONLY if you use Authy, and it requires some backend API shenanigans that I won't even begin to be able to look at until after work.
The only other options are one time codes and e-mail verification.
Do you use Authy?