Example format (do not reuse this example): correct-horse-battery-staple

Length is more important than complexity. A long passphrase is significantly harder to crack than a short, complicated password.

How do you remember all of your passwords?  Use a password manager. 

Consider your most important accounts and have the strongest security. The obvious are your bank and credit card accounts, but do not forget about the accounts that are used to access other accounts. For example, your email address is usually used as your username. Even when it isn't, that is where the "I forgot my password" resets and other notices are sent. 

Be sure to keep your email account secure. 

Use the additional layer of Multi-Factor Authentication as much as possible. 

Do not reuse passwords. You should have a different password for all accounts. In order to keep track, you should have some kind of password manager. 

A password manager is an app that stores all of your passwords in an encrypted format. This means that you only need to remember one password to access all of your other passwords.  Think of it as having a key lock box to store all of your keys. Most password manager also have a generator to help you come up with and keep track of strong passwords. 

Stuck or want an example? Check out this passphrase generator. 

Cloud-Based Password Managers (Subscription) 

You pay for a service that stores your encrypted vault and synchronizes it across your devices. You get convenience and don't have to manage the underlying infrastructure yourself. The subscription typically includes synchronization, recovery options, family sharing, support, and other convenience features.

Example: 1Password, Dashlane

Cloud-Based Password Managers (Free/freemium)

These services provide many of the same benefits as subscription services, often with a free tier and optional paid features such as advanced sharing, monitoring, or additional storage.

Example: Bitwarden, Proton Pass

File-based/self-managed

Your encrypted password database is a file that you control. You have more direct control, but you're responsible for backups, synchronization, and recovery.

Example: KeePass (and compatible applications)

Built into your Ecosystem 

Password management is integrated into the devices and accounts you already use. This can be extremely convenient if you primarily use one ecosystem because passwords, passkeys, and MFA codes can synchronize automatically between your devices.

Apple Passwords works best on Apple devices and synchronizes through iCloud. Google Password Manager works best within Android and Chrome using your Google account.

These solutions can also work on other platforms, but the experience may be less seamless than it is within their native ecosystem.

Tip: If nearly all of your devices come from one ecosystem, a built-in solution may be sufficient. If you regularly use a mix of Windows, Mac, iPhone, Android, Chrome, and multiple browsers, a dedicated password manager may provide greater flexibility.

Example: Apple Passwords, Google Password Manager

Browsers

Google Chrome, Microsoft Edge and Mozilla Firefox also offer the ability to save your passwords and sync them when you sign into your browser with a free account. 

Saving passwords in your browser is significantly better than reusing passwords or trying to remember them all. When you sign in and enable synchronization, your passwords can be available on your other devices using the same browser account.

Browser-based password managers are convenient, but they are closely tied to the account used for synchronization. If an attacker gains access to that account, they may also gain access to your saved passwords. Protecting that account with a strong password and MFA is essential. 

Dedicated password managers often provide additional security features such as a separate master password, emergency access options, advanced sharing features, security monitoring, and greater flexibility across browsers and platforms.

Paper Notebook

Yes, keeping your passwords written down in a notebook is still better than having to remember them or using the same password for everything. Just be sure to keep the notebook in a safe place (don't carry it with you!). While not encrypted and susceptible to anyone in proximity to your hiding spot, this method will never be hacked online. 

Tip: Use an address book. They are inexpensive, usually sturdy, and the alphabetical tabs make accounts easy to find and organize. They also tend to look less like a password list than a notebook labeled "Passwords." Regardless of the format, keep it in a secure location and do not carry it with you.

Conculsion

None of these approaches is automatically right or wrong. Consider where your passwords are stored, how you will access them on different devices, how you will recover them if something goes wrong, and how much responsibility you want to take for managing them.

When choosing a password manager, be sure to select one that has an app for all of your devices and a plug-in for all the browsers you use. You are more likely to use strong passwords if you do not have to type them in everywhere. A good password manager setup will fill in the password wherever you need it and reduce typing passwords to a minimum and reduce the temptation to reuse passwords in order to remember them. 

If you've come this far, check out the Password Manager Cecklist to help decide which one to use.