An effective password protection technique using decoy passwords