Replacing the weak security of passwords with two-factor authentication is a no-brainer for security today, but there are still situations where passwords remain.