[PaperclipTaken]

I'm still against using passwords at all. In today's society it's completely unavoidable but instead of expecting people to go through the trouble of maintaining a different password for every site we should be trying to move websites in the direction of using tools like public key authentication and two-factor authentication. The future of internet security will be better if we make life easier for the end user.

And while public key authentication may seem difficult to implement server-side by doing such a thing you will never risk a database password leak again.