Recent investigations show how users can be authenticated via web without using passwords. It’s called WebAuthn or Web Authentication that uses a Web API in a browser. Clients can be verified with their phones, hardware keys, or trusted devices. In his article, Nick Steele explains the new standards
An email address can be the key to an online identity, and that's just what IDLight is using in its identity lookup API. By supplying either an email address or a URL to the IDLight API you could be turning the key to unlock a swath of identity information.