Dropping passwords because of heartbleed is an over reaction. But passwords are hopessly outdated.
People need secure cryptographic hardware tokens (something they have) with a passphrase (something they know).
People need secure cryptographic hardware tokens (something they have) with a passphrase (something they know).
Check the whitepaper Apple published regarding their iCloud Keychain mechanism.
It generates secure passwords, locks them with a passphrase, but also makes them available on all your devices, not just one (which, if it breaks, you're locked out of all your services).
Using hardware for tokens is secure and simple, but it shows a severe lack of imagination. I only see hardware tokens as useful for very high security logins, like bank accounts, where the apparent inconvenience is at least justified.