The passwords are on different systems, you sit at a console. You have to change them regularly. I can use long DICEWARE style passwords for SSH, but I'd rather just have it use scrypt.

Though I have thought of having a mechanical typing device, actuators for each key, that would just type them for me. But it would be conspicuous.

I do use keepass for all the hundreds of other passwords where possible.