Password authentication is vulnerable, even with 2FA. A free WordPress plugin from Trusona makes a passwordless WordPress login both fast and secure. This video will tell you how to get the Trusona Passwordless plugin, how to install it, and how to use it.
This website has been passwordless for a little over six months now. I have not had any problems with the plugin, or the passwordless process.
This looks like the future of the login.