Poor password practices are behind the majority of cybersecurity breaches, but alternative methods of authentication have their own drawbacks