If you have users too stupid to remember their own chosen passwords, or
you use rules that make it nearly impossible to create human-memorable
passwords, then have the user use something like PasswordSafe. It's
free at sourceforge.net. They will, however, have to remember the
password that THEY choose to let them open PasswordSafe but they are
reduced to having to remember just one password using their own rules.