Hi,
Thank you for your reply.
Is it a Azure AD environment or hybrid or local environment?
For Microsoft Authenticator app MFA, we need to download that software on phone.
When you want to login in PC, type your username and password into the device, and then copy the associated verification code from the Accounts screen of the Microsoft Authenticator app into login. However, your environment is not a local environment, this measure might not suitable for you as it has requirement for phone system version and logon process is little complex.
As enable passwordless sign-in with the Microsoft Authenticator app is still in preview also need Azure AD environment, so I would not recommend to use it.
For Windows Hello for Business, which is different with Windows Hello, yes it has replace passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and uses a biometric or PIN. And it could be configured by Group Policy or mobile device management (MDM) policy, always uses key-based or certificate-based authentication.
"i need to add my pass and an additional method each time i log in to my windows machine."
Password is not a strong security choice, we would recommend to use PIN or gesture instead of PIN. As In Windows 10, the Windows Hello for business provisioning process creates a cryptographic key pair bound to the Trusted Platform Module (TPM), if a device has a TPM 2.0, or in software. Access to these keys and obtaining a signature to validate user possession of the private key is enabled only by the PIN or biometric gesture. So it just like others even got your PIN still can't get your password and not able to login from other device to access your computer.
Also Windows hello for business could save money to buy attentional device such as token.
Here is Authentication method strength and security:(source: link)
If you don't want to use Windows hello for business, you could try with hardware token or phone.
Bests,
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.