1Password does it right: Everyone's master password is augmented with a big randomly generated "Secret Key" that is stored (only) on their machine. Even if the

1Password does it right: Everyone's master password is augmented with a big randomly generated "Secret Key" that is stored (only) on their machine. Even if their entire database was leaked, the Secret Key guarantees a good minimum password strength. (The main drawback is that the user now needs to save this Secret Key or get locked out forever. But it's less sensitive than the master passphrase, since it's mainly designed to protect against this mass-leak scenario.)