human nature and memory being what it is, most users write their passwords in notebooks and on post-it notes, which leads to compromises.
Username-and-password is a two-factor authentication-something you are (yourself) and something you know (password).