Use the tuple (email,passphrase). Still easy to remember and the email functions as a salt, and will prevent any rainbow attacks