Can you introduce hardware authentication?This is currently the most secure solution.
Support for the U2F / FIDO2 dongle❓for example Solokey / Yubikey / Yubico
More info:https://developers.yubico.com/https://developers.yubico.com/U2F/