In my previous job they usually advised us to use an acronym/initialism derived from some phrase which would be memorable to us. I dunno how secure it was. For one thing I'd bet 90% of the people had the substring "wtf" in there somewhere. Or "Ihmfj" (I hate my f*ing job). Plus a few numbers.