Perhaps add options for users to log in using an OTP generator or yubikey as a second factor.
OpenID is service that allows you to log-on to many different websites using a single indentity. Find out more about OpenID and how to get an OpenID enabled account.
Password Depot 11
All the ideas and discussions