Yes. Epovest speaks WebAuthn and FIDO2, the standard the web uses for security keys, so a key registered on your account is asked for after your password, and the sign-in goes through only when the key is there.
Hardware keys from Yubico work with it, and Epovest is listed in Yubico's own catalog: Epovest in the Works with YubiKey catalog. The same standard covers the authenticator built into your machine, Windows Hello, Touch ID or Face ID, and a compatible phone held to the reader over NFC.
Register several keys on the account, so a key left at the office or lost still leaves you a way in. Recovery codes come with the first one, each worth a single sign-in when none of your keys is within reach.
The whole path, from the first key registered to a lost one replaced, is on the security keys page.