This low-cost device may be the world’s best hope against account takeovers