. . "I would like to think that by being asked to enter a password a user is more likely to consider what they are authorizing but in most cases, the user is the weakest link." . .