A company wants a secure replacement for passwords that resists look-alike login websites. Which authentication option best meets this requirement?

1. A longer reusable password
2. Email one-time codes
3. SMS one-time codes
4. Origin-bound FIDO2 passkeys