In modern times (read: every site leaks its database all over the place), you really need a different password per service. XKCD approach isn't going to help, since you'll never be able to remember the password to a site you haven't used in 4 months. You still need a password manager, so you might as well let it generate strong passwords for you. XKCD passwords aren't as strong as you'd think.