The most secure passwords are the ones you don’t need to write down