In reply to Otto.

Maybe teaching people to use password managers could be a good idea? Users usually don't subscribe to only one service, if they have then accounts on ten services it would mean remembering ten strong random passwords. Is that even doable? Ok, write them on a post it, every time you login somewhere you must take your post it and copy a 12+ characters password made of mixed upper case, lower case, numbers and symbols. We simply cannot ask users to do that, they wouldn't. A password manager as of now is the best possible solution until we'll find some reliable biometric method.