The weakest link is nearly always the user... but, unfortunately, they're not a link you can do without. All you can do is look after your end and force their h

The weakest link is nearly always the user... but, unfortunately, they're not a link you can do without. All you can do is look after your end and force their hand as much as you can - password strength meters, salting and hashing passwords, etc.