I used to use nonsense words from the Jabberwocky with a number in them. Now I use LastPass, and I'll continue using LastPass. Their probably-paranoid approach has shown that they take security seriously.
Here's an interview in PC World with their CEO:
http://www.pcworld.com/article/22726...ible_hack.html