> Except, how can you be sure your password was stored securely? You should never assume that. You don't have to. You can use a password manager with an open p

> Except, how can you be sure your password was stored securely? You should never assume that. You don't have to. You can use a password manager with an open protocol (like 1Password) where you can tell the db is encrypted using a key correctly and slowly derived from your master xkcd-style password. If done correctly, it's a much better scheme than randomly generated characters because at the same level of entropy you wind up with a password you can actually remember and type quickly and use consistently in conjunction with a password manager.