oPass: A User Authentication Protocol Resistant to Password Stealing and Password Reuse Attacks
A large-scale study of web password habits