Or, more practically, an interrogator could just remind you of a time when you logged in to a particular account, and then try to capture a password as you relive the memory.