Passwordless authentication seems like a good alternative: <a href="https:&#x2F;&#x2F;hacks.mozilla.org&#x2F;2014&#x2F;10&#x2F;passwordless-authentication-secure-simple-and-fast-to-deploy&#x2F;" rel="nofollow">https:&#x2F;&#x2F;hacks.mozilla.org&#x2F;2014&#x2F;10&#x2F;passwordless-authenticatio...</a>. I’m planning it as a replacement for Persona. (Currently waiting for my host, Modulus, to add support for Let’s Encrypt.)