Comment by nine_k

This means that you still need a password, which you still should store securely.

It just becomes much harder to phish out this password.