"What's a mystery to me is why every site doesn't at least offer two factor authentication as an *option*, especially as virtually everyone now carries around a device which can function as the second factor. "Type your password" is pretty weak security. "Type your password and the six digit code we just sent to your phone" is pretty good security. It's really not that hard to implement, but it's amazing how many sites (especially banking sites) don't even offer it." - Eric P