Once again passwords are in the spotlight as the number of data breaches reaches epic proportions. It seems like cyber criminals are focusing their attention on finding an easy route to rich pickings, and what could be faster than stealing your password? With this information, most security controls can be easily bypassed, and yet the security industry seems to have created a false sense of security. Is it time for a different approach?