Two-factor authentication

Authenticator app (TOTP)
Google Authenticator, 1Password, Authy…
Passkey / security key
Face ID, Touch ID, Windows Hello, or a hardware key (WebAuthn)
Recovery codes
One-time backup codes for when you lose your device

Password

Active sessions are signed out on password change.