Easy-to-Remember Passwords Can Be Hard for Hackers to Guess