Ideally you generate the password for your password manager XKCD-style, and let the password generator spit out 128 bit ASCII passwords for everything else. The

Ideally you generate the password for your password manager XKCD-style, and let the password generator spit out 128 bit ASCII passwords for everything else. Then an attacker needs to get a sufficiently recent copy of your password database first, and password managers can afford using much higher work factors for their master password than websites for every single user.