A user’s account on a website is like a house. The password is the key, and logging in is like walking through the front door. When a user can’t remember their password, it’s like losing their keys. When a user’s account is hacked, it’s like their house is getting broken into.
http://www.smashingmagazine.com/2015/12/passphrases-more-user-friendly-passwords/