I really like the idea behind passwordless [1], where users never use a password but just confirm they are who they say they are.<p>I always remember Tom Scott saying &quot;Don&#x27;t store passwords yourself if you can all avoid it&quot; [2] and how you should leverage google, facebook and other 3rd party authentication methods as a way to add a layer of security and remove one way to compromise your user data.<p>[1] <a href="https:&#x2F;&#x2F;passwordless.net&#x2F;about" rel="nofollow">https:&#x2F;&#x2F;passwordless.net&#x2F;about</a><p>[2] <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=8ZtInClXe1Q" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=8ZtInClXe1Q</a>