In my experience, there is no password that is generated by most humans that cannot be quickly and easily cracked by good password guessing tools. The tools hav

In my experience, there is no password that is generated by most humans that cannot be quickly and easily cracked by good password guessing tools. The tools have gotten to the point where they already know about every trick you might throw into the mix, and they already have mitigation schemes designed to be optimized for them. You should be letting your password manager generate all your passwords, according to the limits imposed by the site, and make sure that you never accidentally re-use any of those passwords anywhere. It should be a reliable password manager with local storage of the vault. If cloud storage/sync is used, you should be able to choose your own cloud storage/sync mechanism. And then you should add 2FA on top of that, if you can.