Will increasing cyber attacks spell the end of username and password security?

US regulators are considering mandating that companies ramp up online protections, but analysts warn there is no immediate cure-all