Passwords which can be recovered with a tool by someone other than the user to whom they belong, and passwords which tend to be forgotten by the user to whom they belong, are two different failures of the whole function of passwords.

Its true that the first failure can be used to mitigate some of the visible harm of the second, but any place that features a coincidence of the two failures really should be taken as a particularly strong sign that, in that place, passwords of the type used are entirely the wrong tool for the job.