Most people in this day and age store their passwords on Google. You may think you're just saving it on Chrome, but it's stored on Google's servers and they're holding the encryption keys. This is obviously a problem.
The solution to the problem is a password manager. If you need cloud syncing, go with Bitwarden, 1Password, or (my personal preference) Proton Pass. If you don't trust the cloud at all, go with KeePass. All password managers run basically the same.
If you're going with KeePass, here are the versions I recommend:
The basics of password managers work universally no matter what they are. The steps to generate a fresh password:
When you make your password, look at the requirements on the account you're making it for. For example:
With those in mind, you put the character account at 36 characters and hit the toggles for upper-case, lower-case, numbers, and specific special characters. Your password manager will generate some random password for you that will fulfill the requirements. Your password should look like this:
And now you only have to remember a couple passwords, including your database password. Let the password manager do the work for you and you won't have to worry about multiple accounts getting breached from a credenttial stuffing attack.
Proton Pass is also good if you have a paid subscription so you can create multiple email aliases, preventing sites like Facebook (and other Meta malware) from creating a shadow profile on you.
Here's how to make sure your password manager is doing its job, no matter what operating system you're using?