Only 3% of Americans believed in using a hardware security key as the most secure method, despite it being considered the most effective tool to stop phishing.