4-6 base passwords, combined with a sequence of standard variations.

Would be nice to have pubkey authentication with the pubkey stored on a distributed system online which I could revoke/regenerate at will.