security vs usability

• eg how more stringent password requirements have made passwords harder to remember so the system is less useable - then loops back round to low security as people write them down or repeat one