Security features are not designed with usability in mind. We have to make it easier to people to do the right thing. We must do better.