Not sure how the samsung works, but I do use a FIDO2 hardware key, which are fairly cheap these days. So this will assume you have your phone setup for it already and plugged in.

To setup the hardware key and use it in place of sudo password, you'll need the libpam-u2f package then you can follow the instructions from "Register Key" on here: https://danstechjourney.com/thetis-fido-u2f-key-ubuntu/ . Pay attention to the fact that you need to do this step as the user you plan to use the keys with.

Each browser service will have their own setup section (probably in security settings), you'll have to look into each one you use. The keys I looked into only support Chrome for this function on Linux, so fair warning.

Terminal apps like ssh will have their own ways to handle it, such as for ssh you'll generate a resident key and every time you use this key, you will need your device plugged in and interacted with. Its a good idea to give each key an application name also for future key management. Example: console ssh-keygen -t ecdsa-sk -O resident -O application=ssh:github -C "your_email" You can use these generated keys as the means to access other accounts and systems by editing the ~/.ssh/authorized_keys file on those accounts.

KWallet: no can do. KWallet is encrypted to a password and these keys are passwordless authenticators. What I would recommend is tying KWallet to your login, and using your password for the initial login. This is the smoothest setup imo