Many sites where I perform sensitive transactions require me to periodically change my password (banks, brokerage, etc.) The Shannon entropy of the impossible

Many sites where I perform sensitive transactions require me to periodically change my password (banks, brokerage, etc.) The Shannon entropy of the impossible to remember example password is 3.68418, which is not much better than the xkcd "easy for a human to remember" password 3.36386