Researchers show why keeping a handle on user credentials is just as hard…