FIDO2

FIDO2 replaces vulnerable passwords with unphishable public-key cryptography using WebAuthn and CTAP standards.

FIDO2 eliminates credential theft by moving authentication to the local device. It combines the W3C WebAuthn standard with the Client to Authenticator Protocol (CTAP) to enable secure logins via biometric sensors (Windows Hello, FaceID) or hardware keys (YubiKey 5 Series). By utilizing unique cryptographic key pairs for every site, FIDO2 prevents man-in-the-middle attacks and ensures that a data breach at one service provider cannot compromise user accounts elsewhere.

https://fidoalliance.org/fido2/