I have a mix of methods. For sites that I rarely visit or are of no real consequence if the password were compromised I use a memorable one for them all. For s

I have a mix of methods. For sites that I rarely visit or are of no real consequence if the password were compromised I use a memorable one for them all. For sites that I care about the security I generate a random password with something like this: dd if=/dev/urandom bs=1 count=12 | uuencode - then store that in psafe (http://www.hep.wisc.edu/~dan/psafe/ http://www.hep.wisc.edu/~dan/psafe/) with a master password that I remember. This way if some site's password does get compromised, it doesn't translate to any other site. I suppose I could also carry around the encrypted psafe file with me on a USB key, but I've found that I don't really need to log into these sorts of sites when I'm out.