I use a system where the password for each site is a combination of a secret phrase (changed periodically) and a simple transformation of the site name that I can do in my head.
I’ve never had a second account hacked in 20+ years.
How many characters are we talking here?