Passwords have been around forever, but their value as a means of verifying user identities is diminishing as hackers find cheaper, more effective ways to defeat them. Efforts to strengthen passwords using more stringent policies, strengthening them with a second factor of authentication and educating users how to better protect them have not yielded good results. User authentication requires a new way of thinking.
