>This is what needs to be fixed; there is no reason for most people to remember more than two passwords for personal use, one or two more for work in some cases

>This is what needs to be fixed; there is no reason for most people to remember more than two passwords for personal use, one or two more for work in some cases, and maybe a few more in special circumstances. Decades of encouraging (or legislating in some cases[1]) users to do the wrong thing makes people hate passwords. I'd argue there is no point for any person to remember more than 2 passwords. That is what password managers are for. One master password and you don't know your other passwords. Those are randomly generated for security (pick a password manager capable of generating pattern-matching passwords for places with terrible password policies). >[1] Apparently in the US medical patient portals are required to (attempt to) prevent you from storing your password in your web browser. HIPAA concern. If credentials are stored someone could login as the patient and view their details.