It still helps if you're not actually using passwords. I use a Mooltipass (https://www.themooltipass.com/ https://www.themooltipass.com/) loaded with keys gene

It still helps if you're not actually using passwords. I use a Mooltipass (https://www.themooltipass.com/ https://www.themooltipass.com/) loaded with keys generated with pwgen -s 16 (fully random, alphanumeric, 16 chars) That seems to give about 95 bits per password, plus 18 brings it up to 113, which I think is not bad at all. I'm pretty sure I can count on my passwords not ever being cracked by brute force. Anybody stealing a password database will have time and effort constraints, and will likely be happy with just cracking the easier set. If a government wants my stuff it's much easier to just convince the service provider to give them the data directly.