Another solution can use MFA, where a user needs to be something, know something, and have something. Consider the cost of purchasing, installing and maintaining