On Feb 18, 12:59 pm, Danish wrote:
> I should have made clear that the site
> I'm creating is for use only by a company's employees (so they don't
> have the choice about whether to use it or not), that they may be
> accessing the data from 'public' computers and that the data stored is
> of a sensitive nature so security is of high importance.
>
> Nigel

Maybe use two passwords and a pre-decided simple algorithm.
For example after logging in with a first password like
password123 the user is shown the last second password entered,
for example password128,
and asked to enter a new second password
(pre-decided to be the last password entered with the last
digit incremented by one, for example password129),
so the second password changes all the time,
or something like this....