If only there were a solution I could buy... ;) No, I do believe you should use Google Authenticator, it’s free, easy to implement and adds a lot of security over just passswords.