As always, the most secure password is the least convenient and accessible. It’s a trade off, but you want fewer dictionary words and patterns overall. Preferably with a physical component for the master password.

Longer is better…giggitty.

At least you can understand how others justify their continued use based on the lack of no perfect alternative, even in the face of the current solutions imperfections.