You have made the assumption that everyone who uses strong passwords can remember them in their head :-)