&gt; push key management to the user<p>There is no other way. Unfortunately, there has been a serious lack of r&amp;d in this area, so we have a lot of catching up to do. I believe it can be made to work, though, because this is not <i>entirely</i> a new idea for most people: they already understand <i>physical</i> keys and the problems associated with losing them.<p>Moving to digital (public-)keys isn&#x27;t a perfect match, but it is entirely possible to leverage the skills and experience that people already have. For example, contrary to the advice used a decade ago, Schneier recommends[1] that people write down their passwords (avoiding the memorization problem). This can provide good enough security most of the time, because people already understand how to provide security for their <i>wallet</i>.<p>Incidentally, I always liked the basic idea of the Java Ring[2]. It was basically a fancy (for the time) smart card, but the idea of storing the chip in a ring is an attempt to make security management <i>personal</i>, which is an idea that had potential.<p>[1] <a href="https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2005&#x2F;06&#x2F;write_down_your.html" rel="nofollow">https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2005&#x2F;06&#x2F;write_down_yo...</a><p>[2] <a href="http:&#x2F;&#x2F;www.javaworld.com&#x2F;article&#x2F;2076641&#x2F;learn-java&#x2F;an-introduction-to-the-java-ring.html" rel="nofollow">http:&#x2F;&#x2F;www.javaworld.com&#x2F;article&#x2F;2076641&#x2F;learn-java&#x2F;an-intro...</a><p>edit: forgot a link