I think two-factor authentication is better than pass phrases. If we all move to pass phrases it seems like hackers with change their algorithms to guess words rather than individual characters, which will bring us back to where we are now. The assumption that phrases add so much complexity is based on current…