I discuss my own best practices recommendation for limiting the impact of user account breaches while keeping it as simple as possible to keep track of your passphrases.