An unmemorable strong password written on a memo should be viewed as 'what we have', definitely not 'what we remember', so it could be used as one of the two factors along with a remembered password. <URL> https://www.slideshare.net/HitoshiKokumai/identity-episodic-memory