How does one handle password rotation requirements?

Doesn't that make your passwords predictable? If you use the same secret for every domain and now if an attacker figures out your one secret then they would be able to find out all your passwords.

What do you when a generated password doesn't meet a web site's requirements (on length, character classes etc)?

oh that's cool. what I do is similar except simpler, much so.