Passwordless authentication is moving from niche to mainstream as security threats outpace traditional password defenses.