Sounds like https://webauthn.io/ would solve your problem. It's a real solution in use by a number of popular websites already. E.g. Cloudflare, ID.me.