Ask HN: What's (in your opinion) the best authentication method for web apps?

i'm looking to gather some opinions, as i've been building some small apps recently and noticed some dissatisfaction around using magic links for authentication.

at the same time, i do not want to use google despite being very simple, just because they already have enough data on me as it is.

do people mind email and password combos? or perhaps passkeys are the future?