Paypal and other websites are not mobile devices. Using a high-entropy random password is still a best practice with those, and many of us recommend a (database or deterministic) password manager.