The media may be overhyping the threat of card fraud, but it is time to rethink our reliance on passwords.