With cryptographic keys, normally stored on a smartphone. BankID[0] is the most common solution, but there are others. I personally use biometric 2fa to log in, and PIN to sign contracts or pay.

[0]: https://en.wikipedia.org/wiki/BankID_(Sweden)