Passwords are a security nightmare

• Users reuse them across sites.
• One breach can unlock multiple accounts.
• Complexity rules push people to forget or write them down.
• The real fix is to remove the password entirely.

Authenticator apps are still a hack

• They require a second device.
• Copying 6-digit codes adds friction.
• They can still be phished in real time.
• Losing the device can lock users out.