"Saul" <saul.dobney@dobney.com> writes:
> The problem with good secure passwords is they are eminently
> forgettable as our current users keep demonstrating - so they either
> pick weak or simple passwords or keep chasing us for password help, so
> I want something easier without losing password strength for an
> application where we really do want better levels of security.

If they have to keep an image file around, why not just use a password.
How about giving them a card with a password printed on it.

> Oh and as we're just a smigeon smaller than eBay/Paypal hardware
> solutions aren't really available to us.

The stuff isn't that expensive.