I'd argue that it's an issue regarding conventional password length (probably stemming from the nomenclature―rather than password, it should be passphrase). I s

I'd argue that it's an issue regarding conventional password length (probably stemming from the nomenclature―rather than password, it should be passphrase). I seem to remember an article floating a month ago on strong passwords, and how long, passwords (passphrases) like "fluffy is puffy" are stronger than "s#g789@d/". Better user education (for want of a better word) is necessary as well―something as simple as adding the domain of the site in question to the password increases a user online identity by a significant amount. With Moore's law (and quantum computers on the distant horizon), passwords will get ever-easier to crack―the next logical step are keys and certificates.