Adding a second layer of security (like a code from your phone) makes it significantly harder for unauthorized users to gain access.
WordPress is moving toward passwordless authentication and integration with (WebAuthn). In upcoming releases, you may log in using your device's fingerprint, face ID, or a physical security key. wp login