Out of left field, but take a look at Trezor. They specialize in cryptocurrency hardwallets, but by extension, they also offer password/2fa functionality on their devices. No biometrics* that I'm aware of, but PIN protection is mandatory.
Site: https://trezor.io/