Unless there's money involved, I don't bother with a strong password.
Why? Because even if my password protocol and tradecraft are bulletproof, most sites aren't. Sites get
compromised so often that even a good password will fall in a year or two. Or your password _manager_ gets
So... why bother? Start with "Password#1!" (which almost all sites will accept as "strong" and
when (not if, when) that compromises, move to "Password#2". And so forth.
Okay.... don't use the word "password". Use "Starbucks#1". Or "Galactica#!".
Other than a very few sites worthy of _trying_ to protect (your bank and maybe your primary email) one password
shared across all sites is more than adequate because compromise is inevitable. Make the cost of
compromise as close to nil as possible; that's the optimal behavior. I mean, who cares if your brownie
recipe gets trashed?
And never, ever store a password that can be turned into money on anything more connected than a
post-it note in your wallet next to your Benjamins.