Authentication methods that cannot be phished, such as FIDO2 security keys. Uses cryptographic binding to origins, preventing credential theft via fake sites.