Perhaps the future lies more with the "something you have" form of authentication than the "something you know", like passwords, that this article complains about.<p>For example, Google's two-factor authentication seems very secure, even with a weak password. To log in, I need to enter the ever-changing six-digit number off my iPhone as well as my regular password. Similar to this are other schemes which use any SMS-capable phone: enter your username and password on the web site, then enter the word the system just texted to me. Some banks use this to secure the addition of a new electronic bill payee, for example.<p>If you think about it, password safes, client-side SSL certificates, SSH private keys, etc., are really all just "things you have."<p>Computers aren't getting any slower; the gap between what you can remember and what they can guess is only getting smaller.