A security key plugs into your USB port.  Duo uses the WebAuthn authentication standards to interact with your security keys. You may also see WebAuthn referred to as "FIDO2".  Duo DOES NOT support U2F-only security keys (like the Yubikey Neo-n)