"Everybody talks about the password, but nobody does anything about it."

Mark Twain said that. Or, maybe it was Charles Dudley Warner.

See: Millions of Internet users have learned the hard way, no password is safe (mybroadband)