
Security researches, and professionals alike will all agree that the "good-ole-password" just isn't good enough for basic security anymore.
With the almost universal capability of spyware and malware to capture keystrokes on an infected machine, combined with hardware key-loggers the size of keyboard jacks the risk of having someone stealing your password is increasing.
These risks are even more important when you consider "remote or vpn access". Consider now what you can trust on any given PC that you may use.
Enter Two-Factor authentication:
Two-Factor Authentication utilizes some physical entity such as the AccessAnywhere "Personal Identity Key" to make your password have two components:
b) Some form of personal PIN or code
The two of these combined make each password entry unique and only usable once. Given this even someone has "caught" your password it is useless as it's been used.
More and more services are beginning to use this type of login method.
You should be using one too!