You could also do Web Authentication, which is based on Public Key cryptography and ships with every major browser and is integrated into many operating systems.