We build apps/services for the healthcare space. Passwords are the numero uno cause of friction for healthcare users - but not for healthcare staff. We've experimented with a few password alternatives but haven't landed on any that: - Don't force users to take a second step after they've entered some identity information in the first step. - Is HIPAA compliant. There's no specific requirement for passwords but the security standards are very high; need to be audit proof.

My sense is a bioID is where we're headed. This year feels like the beginning of the end of the password era.