The key is to get away from the password model and get into the token model. BUT, the token model is a giant pain in the butt.
“the token model”
What’s that? Did you see the other post about the two-factor method?