Financial software should enforce dual factor authentication to significantly decrease the risk of a password compromise