Persona doesn't require a password. You could authenticate with an SSL certificate, a Yubikey or whatever else you want. I wrote my own, hosted identity provider (https://www.persowna.net/) which includes 2FA now, and I plan to add more of these types of authentication in the future.