content: Seriously. My most secure password is a paltry 23 characters long, but it's long enough to be robust to brute force and memorable enough that I don't have to think about what it is. You could stop at the step where they say "pick a song lyric you like", use that as a password (With or without punctuation) and you would be golden.