Personally, I use wallets in watch-only mode. Private keys are stored in password protected files with backups in 3 different locations (local storage, USB, online storage). The passwords are strong, but also easy to remember. I never use anything personal in passwords, for protection against social engineering, so the they're random digits, and ASCII characters. As a last resort, I ask my most trusted person to remember the password - just in case of fatal accident, or other health-related disaster. And last but not least, for transactions, always use the machine that you're sure is free from malware - ideally live linux distro, but if you have no experience, then use a fresh Windows laptop, or Android tablet, that has never been used for surfing. Obviously, all of this may be a pain in the ass, but it may save your funds.