One main problem is that you have to make passwords recoverable. In real world message like &quot;warring! we can&#x27;t restore your key!&quot; just doesn&#x27;t work at all. People ignore it and still want you to recover their keys. Also forcing people to have password is also very vulnerable.