Perhaps now that SQRL is finally available to use we could consider it. This should give the highest level of privacy and security.

https://www.grc.com/sqrl/sqrl.htm