[CyberRage]

I specifically didn't mention WebAuth...

U2F(Yubikeys utilize it) and TOTP are both great options.

even push to login is quite common these days.

You have great options.

[qudat]

For chrome u2f was replaced by webauthn. Regardless, both are hard to implement compared to passwords