online services/anything you can autofill with pw manager:
random generated password as long as possible + MFA like hardware token (UF2)
FDE device/pw manager/anything you can't autofill:
Passphrase containing at least 8 random words (Diceware) + if possible MFA like keyfile or hardware token