[dec0dedab0de]

You could do client ssl certs and just skip the password. It would be more work for the user though.

[cabaalis]

That would transfer it from something you know (a password) to something you have (a device with SSL cert installed) which are meant to protect against different problems.