A password is never enough on its own: you confirm a second factor next. Certificate and passkey sign-in happen automatically when available.