> Using them correctly won't really make anything more secure, but using them incorrectly might blow everything up. The main benefit of PAKE is avoiding accide

> Using them correctly won't really make anything more secure, but using them incorrectly might blow everything up. The main benefit of PAKE is avoiding accidental logging of passwords, which absolutely happens at organizations all the time. ZKP is a fine approach, although you can avoid much of the issue with something simpler (addressing a narrower threat, but the most relevant piece).