The rising tide of breaches — including those focused on stealing credentials — is used as anecdotal evidence that the time for the password is over. Blaming people conveniently overlooks the reality that an attacker capturing an entire password database is a problem with the organization. Focusing attention on improving all three elements yields better and more secure authentication – password or otherwise. The problem is less with the factor than the overall system of authentication, the problem is with the overall authentication system. The key to making it easier for people starts with designing and implementing a system matched to their needs.”]