Passwords remain the backbone of online security, even as newer tools like biometrics and passkeys gain traction.