I agree - aren't we all sick to death of passwords. Well how about a passwordless solution. One which requires you to identify yourself through SSO or OpenID but then authenticate yourself securely through a 'secret' code sent to your browser and validated by your mobile phone. I won't say anymore - we launch this service next week and we will revolutionise this space. Check it out. LiveEnsure. http://www.liveensure.com/ The key principle is ' identification is not authentication' . !!