Could we replace traditional passwords with One Time Passwords?
We should start switching from 6 digits to many more, 10 at least or 16.

TOTP and lookup secrets as first factor authentication
https://github.com/ory/kratos/issues/2979