On one side I understand the need for good passwords given how bad websites are at keeping their clients data private, but fundamentally the problem is rather that websites are leaking data, not that passwords are too weak.<p>How do we solve that problem?