Have you ever wondered that if your master-password  used for SSO for  accessing several applications can be compromised in terms of Phishing, Keylogging or over-the-shoulder attacks? In the least, an offline attack of stealing "hashes" for your passwords from your LDAP or AD or your secure databases? Looking for something that can make all your passwords one-time disposable but without gadgets and SMS texts? Want something that doesn't invade your biometric privacy?