Interesting. However there are still passwords involved, albeit hidden from user. I think that OpenID and widely accepted providers like Google are a way to go. Lots of sites (no need to name, I suppose) already support these technologies and devices (Android Apps) work with them too. You get added benefit of such features as multi step (hardware token) authentication and one-time passwords. Perfect! More clients just need to start supporting this.