Sorry passwords for what? What are you protecting, internal system, SaaS apps, ?
MFA and password managers are a must these days, I have hundreds of passwords for things and I don’t know a single one

If an employee gets let go or quits, their account is disabled and they have access to nothing.
Password less is the new buzz, but start with something like Duo and Passportal, you could use the excuse the password manager forces us to use complex passwords