It could be done as a desktop application or a browser extension. Reduce the password burden to one password and then generate keys for a PKI based on that (and

It could be done as a desktop application or a browser extension. Reduce the password burden to one password and then generate keys for a PKI based on that (and maybe some other data to make it less guessable) If you sign up for something using this imaginary extension it would simply send your browser a token encrypted with your public key and your browser would decrypt it and would redirect to whatever.com/welcome/<gianttokenhere>. This would put the burden on the user not to accidentally trash their extension and lose their keys, but you could do key-reset the same way that we currently do with password resets.