Too much to remember.
Most corp. IS policies require that passwords:
- Complex variation of alpha, numeric or punctuation
- Change periodically.
Limitation of human memory
- “Unrealistic to expect that users will reliably memorize more than one or two passwords”
- Typically written down in convenient location