@emacsen https://www.grc.com/sqrl/sqrl.htm Uses asymetric crypto, nothing to leak, protected with password (something you know), can be backed up, provides "password reset" flow and requires no special device to work.