The key is trust. Your company, should it be successful, would be "attacked" by the United States government. The attack would come in the form of a couple of

The key is trust. Your company, should it be successful, would be "attacked" by the United States government. The attack would come in the form of a couple of well-dressed men in suits carrying badges but no guns, who would make an appointment, show up on time, and proceed to lay out the benefits to you of a cooperative agreement with the United States of America. They would perhaps be armed with one or more laws which would further encourage you, and those same laws would also prevent you from disclosing (even if you wished it, which you might not) that you've made that deal. I would be interested in a service allowing me to change all my passwords at once. That's valuable. But not if it just makes my security worse. Trust in the company would be a major major factor. Ideally the company would be run by some known cypherpunk or other person who is morally opposed to making that deal with the government, and physically located in Switzerland or some other country where instant compliance with the United States government is less likely. Your company and employees should also be bonded for some ludicrous amount of money, for damages resulting from any breach of your security, including intentional ones... If your hypothetical company was incorporated in Delaware, headquartered in California, and run by some random guys who hope to win the startup lottery and sell out to McAfee or Symantec or whoever, then I can't imagine ever using your service at any price - I would perceive it as adding negative value (adding insecurity without adding security), so it would be something you'd have to pay me to use.