I use a layered approach. My gmail password is the safest (longest) one. Nothing else uses that password. Then it comes the second layer. I use a safe (16 ch

I use a layered approach. My gmail password is the safest (longest) one. Nothing else uses that password. Then it comes the second layer. I use a safe (16 chars) password for other services that are not gmail. Then third and fourth layers, for diminishing levels of importance, each layer has a password. And finally a somewhat insecure (14 chars) for the standard fire and forget services. I definitely reuse the insecure password a lot. And I don't care.