A mixture of both, but not combined. LastPass automatically generates 12-character passwords, which I use on websites that need extra security (with 2FA).
My Microsoft account is personalised (yet, irrelevant), because I would not remember a random 12-character password, it's used daily for logging into a Windows PC. I don't use a PIN, or Picture Password, as this increases the chances of forgetting the password.