Yes. Humans can't remember a sufficient number of sufficiently-complex passwords.