It's far simpler to remove the need for passwords alltogether or at least minimise them than to offset the liability against your employees using security software correctly.