Perhaps the future lies more with the "something you have" form of authentication than the "something you know", like passwords, that this article complains abo

Perhaps the future lies more with the "something you have" form of authentication than the "something you know", like passwords, that this article complains about. For example, Google's two-factor authentication seems very secure, even with a weak password. To log in, I need to enter the ever-changing six-digit number off my iPhone as well as my regular password. Similar to this are other schemes which use any SMS-capable phone: enter your username and password on the web site, then enter the word the system just texted to me. Some banks use this to secure the addition of a new electronic bill payee, for example. If you think about it, password safes, client-side SSL certificates, SSH private keys, etc., are really all just "things you have." Computers aren't getting any slower; the gap between what you can remember and what they can guess is only getting smaller.