How many of these sites actually need secure passwords? How much would anyone gain by e.g., impersonating one on a forum site? If that number is close to zero, one could just use the same &quot;standard&quot; password for all low-security-value sites and be done with it. For other, slightly higher-value sites, one could leave one&#x27;s devices logged in as long as practical, and generate a new 15-character password every time one must use the &quot;forgotten password&quot; email-a-capability-URL feature. For the designated secure email account, and maybe for certain financial sites, one might need to remember or write down a passphrase, but there will be fewer than 363.