<a href="https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2005&#x2F;06&#x2F;write_down_your.html" rel="nofollow">https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2005&#x2F;06&#x2F;write_down_yo...</a><p>Even with an algorithm, you&#x27;re still relying on human memory. As Schneier and other have been recommending for a long time, <i>write down your passwords</i>. People already understand some amount of <i>physical</i> security, which is knowledge that can can utilized for password storage.<p>As long as human memory is the weakest link, password strength will always be <i>de facto</i> limited to the amount of entropy that a human can reasonably memorize. Unfortunately, brute-force password cracking capabilities flew past that limit a long time ago.