Using certificates for SSH authentication

"Humans just aren't good at remembering secure passwords."

If only there was a password manager database system that enabled you to have unique passwords per thingie!

(Nearly) All of my managed devices have unique and very long passwords. I could not possibly remember those passwords but they are all "secure". I have a few qualis in this space.

As always - evaluate your risks and fix up any flaws found in a responsible way. If you don't have some skills in house, then buy them in (carefully).