True but aren't username/password passe? Username should be 'account details' like mother's maiden name or zipcode, not a security feature.

And short passwords you change a lot - what a weak system!

How about provide a cryptographic key and that's it. It's right or it's wrong.

Or heck, if it's not recognized then just create a new empty account.