Google announced last week that they will start rolling out the ability of Google App Administrators to require a 2 step verification process for logging in.  Many of us are used to this with company VPNs when using a RSA SecurID.  Google is offering many options for the 2 step which is great.   The best option as I see it is the application that you can install on your Android, BlackBerry or iPhone device.