Honestly I really struggle with this. I use a password manager and 2FA for everything I possibly can with completely random passwords.

But on my work machine for first logging into the OS, what can you do? I have a handful of randomly generated passwords from high school memorized so I usually rotate a combination of those, but I don’t love that either.