"Saul" <saul.dobney@dobney.com> writes:
> I'm looking to build some new security features for a website which
> will need stronger levels of password access, but I'm conscious from
> experience that users aren't very good with passwords and keep losing
> them or forgetting them so I don't want just bigger and better
> passwords. What I was wondering was whether image files would be better:

They can lose the image files too, so you may as well use passwords.
If you want something better than passwords, use hardware tokens.
Paypal is selling those for $5 now, so they must have found a cheap
source of them.

http://blog.washingtonpost.com/secur...aud_token.html