It terms of authentication we have: * Things you know

* Things you have (physically)

* Things you are

We have abstracted a thing we know, passwords, to be managed. The alternative could be multiple things we have and things we are.

So a combination of:

* physical objects, such as keys, smart phones, smart cards, USB drives, and token devices.

* fingerprint scanning, palm scanning, facial recognition, retina scans, iris scans, and voice verification, etc.