Password only authentication is no longer considered secure. Most websites that value security offer two factor authentication. U2F hardware keys such as Google Titan and Yubikey are a proven solution. The FIDO2 passwordless model would also be an attractive login approach.