To me it sounds like ssh certificates. If the certificates match (and the passphrase is entered, or cached somehow), you are granted access to your account.
Otherwise you're not, or presented with an opportunity to enter a password. Now, this is for shell access, but it could imagine it being applied to web access.