Using a commercial, paid password manager with a unique password for each unique site visited. Complexity is simply too much to either use one complex password or the same password for every site, any more.
I have a couple choices to use at work; the one I have chose to use is Keepass 2.
The passwords are stored in Box location that I am unable to access outside of work, so I do not use that same password database for my personal password manager. But since I understood the features of it, I use a free version of it from my Android phone as my personal password manager.