We replaced passwords with something worse