It's a shame we're still using passwords, even more so that they are sent to the server. FIDO UAF or U2F is the way this should be done.