Kill the Password: Why a String of Characters Can’t Protect Us Anymore