I assume it would be something like WebAuthN where it could be tied to some sort of USB key, fingerprint, or something similar.