Passwords could easily be both strong and memorable if we got rid of ridiculous anti-secure constraints like "password must be at most length X", "password cannot contain a space", etc.

I've heard somewhere of military organizations having people trained to go in an office and search the places people "hide" their password sticky-notes...