Google engineers are testing new tools that could replace passwords as the primary way of authenticating identity on the web. Google is currently running a pilot that uses a YubiKey cryptographic card developed by Yubico - a startup operated out of Sweden and the US, which has produced a two-factor authentication fob that can emit encrypted one-time passwords to NFC-enabled smartphones.