Google always seems to betting on several horses — for authentication, Google is also backing the FIDO U2F standard. This is basically a standard that allows yo

Google always seems to betting on several horses — for authentication, Google is also backing the FIDO U2F standard. This is basically a standard that allows you to authenticate with a physical security token, connected to your computing device via USB, NFS, or Bluetooth LTE, and reusable for as many U2F-enabled services as you like, without those services being able to correlate that device across services (so if you authenticate as user Alice at GMail, and later on authenticate as user Bob at Youtube, Google won't know you used the same U2F device due to the way keys are generated). No need to type in some generated value (as with OTP), just press the button on the key, or swipe it past your NFC/Bluetooth LTE-enabled device to authenticate. Logins can be optionally strengthened with a weak knowledge-factor such as a PIN. It already works in Chrome, it will be supported in Firefox and probable Edge at some point, and you can choose which manufacturer you want (e.g., Yubico). I really hope U2F gains traction, because biometrics really creep me out (in addition to the many arguments against its use mentioned in this thread).