https://hostingjournalist.com/protecting-employees-from-stolen-passwords/