I'm glad to see this post getting upvoted because I've had to argue with people repeatedly on HN who claim its private / a valid authentication factor.
Look folks, maybe as part of some second or third factor it might be okay...but you still need a password.
Look folks, maybe as part of some second or third factor it might be okay...but you still need a password.