I just asked a user to log in using the password she chose less than 5 minutes ago. (She couldn’t remember it.)

Not that unusual for the average user. I’ve had many users over the years who would forget their passwords every 2-3 days.

Self-service password resets are a godsend.