I've had the opposite experience, my CORP now pushes most auth through my phone's biometric authentication, I don't even use a password.