Disclaimer: I am not a security expert.<p>2fa is a great tool to have, but it is what it says it is - just a second factor. And if your password is weak, your GMail account is just as secure as your second factor is. What if your phone is stolen, and the adversary manages to get hold of your Google password? Having a second factor should not encourage you to use easy/weak passwords.<p>Also, regarding your quest for a more memorable password, there has been a huge debate about this, but your password can be strong and memorable at the same time. As this xkcd comic[1] explains, and further discussions on Security.Stackexchange[2] and MetaFilter[3], such long passwords such as "correct battery horse staples" are good (although a smaller key space - but you could increase that by substituting e with 3, 1 with ! etc, although this technique is common enough to be known by adversaries), and are about as strong as something like h@CK3RZ@(!@WP*<p>Personally, my passwords use the above technique, with a combination of pop-culture references and something about the account to which the password belongs, with a few special characters here and there. And since you say you only need to remember only the password to your Google account, it should be relatively easy to remember just one very complex password.<p>[1]: <a href="http://xkcd.com/936/" rel="nofollow">http://xkcd.com/936/</a><p>[2]: <a href="http://security.stackexchange.com/questions/6095/xkcd-936-short-complex-password-or-long-dictionary-passphrase" rel="nofollow">http://security.stackexchange.com/questions/6095/xkcd-936-sh...</a><p>[3]: <a href="http://ask.metafilter.com/193052/Oh-Randall-you-do-confound-me-so" rel="nofollow">http://ask.metafilter.com/193052/Oh-Randall-you-do-confound-...</a>