@fribbledom I rely on a hybrid solution. Some of them are in a password manager, but I also use passwordmaker for some. The beauty of it is, that there's nothing to hack in a system like that, because nothing is stored anywhere. It's sort of like a hash function that's given two inputs: your master password and the domain you're tyring to log into.

Speaking of generating passwords, I also have a few (not very important) passwords that are generated in my head with some rules I've decided earlier. This way you don't need to remember anything other than the rules. Just look at the name of the site you're at, and run that through the algorithm you've got in your head and there's the password you can't be bothered to memorize.