Passwords aren't going away anytime soon, yet enterprises continue to follow outdated password policies. Organizations should review policies and add security layers around passwords.