I stopped using passwords and switched to the same physical login protection Google uses internally for daily accounts.