I like what my bank does. You password is only 6 characters but can't be recorded by spyware.
They display a 5x5 cases box with one number from 0 to 9 by box, some boxes staying empty. you just click your password in theses boxes. Trick is they change the background picture every time puting digits in different places so any recording software just sees you punching boxes with no way to know what numbers were displayed for you.
I wish epass would add security like that.
My
