We've been told to create passwords that are complicated, to change them regularly and to use different ones for each app or site. But the latest advice is to keep them simple, long and memorable.