I've been doing this for a long time. I have three main levels of password and the most secure has variants for those sites that are particularly strict. It's slightly marred by Tesco who have recently enforced stronger passwords. Consequently when I log in to order groceries I have to use one of my strongest passwords. That's overkill. It's not like anyone can spend my money if they gain access. It only needs a second-tier password in my opinion.