I recommend using a well respected browser based password manager, protected by a strong password, and having it generate strong passwords that you never think

I recommend using a well respected browser based password manager, protected by a strong password, and having it generate strong passwords that you never think of memorizing. Web sites that disable that with JavaScript on the password field should be liable for damages with added penalties - I'm looking at you, banks.