Everyone knows that weak passwords are the scourge of strapping security. Unfortunately, strong passwords are not much better.