Your two examples are rules that are public information, and forgetting them can indeed have legal consequences.

A password is a piece of private information, and requiring people to remember stuff they generate in their own head seems just a tad draconian.