It looks like Verisign has answered my prayers. While listening to last week’s Security Now! episode, they revealed that’s Verisign’s PIP OpenID provider that I blogged about yesterday has the option to use a Verisign security token (which includes the Paypal security token). Here’s how you add it:

1) Login to Verisign Lab’s OpenID provider PIP:

2) Click on the My Account link on the right side.

3) Click on “Add Credential” under VIP Credential:

4) Enter the ID on the back of the security token and the current security code from the screen:

5) And you’re done:

On Security Now!, Steve said that you can register up to three security tokens per OpenID in case you misplace one or one dies or you want to keep one at home and one at work (even though that inherently makes it less secure), I don’t see this option on the Verisign site. However, you can also get a crazy cool red Verisign security token or use your Sandisk U3 flash drive (which I coincidentally just uninstalled U3 from mine) from Verisign’s site (once you’ve logged in):

…so now wherever you go that uses OpenID, you can be assured that via two-factor authentication your OpenID will only be used by you.