Secure Wordpress and SSH with Two Factor Authentication

With the YubiKey, there is an interesting possibility to set your own AES PSK in the token: http://www.yubico.com/personalization-tool . That allows you to depend only on your own server infrastructure and not the one from a third-party like YubiKey. (Might be useful seeing the recent RSA security issue)

This method uses a Yubikey - does anyone have any experience with these?

Yes they are a nice bit of hardware. They emulate a usb keyboard so work on pretty much anything except an ipad. The software is open and they have several modes and you can code your own keys into them.

How about 2-factor auth for unlocking ssh keys and key-based login?