I've been saying that for a decade, often to the derision of other #SysAdmin types. Radical PW ideas I push: Use a password manager; if not, use long passwords, easy to type (don't bother with $p3c14l characters), use a phrase not found in Shakespeare or lyric sheets, write it down, keep it with your money. If your password protects $10 worth of data keep it in your wallet, if it protects $10,000 worth of data keep it in a vault.