Sounds like the problem is more that the same password is used in multiple places. If you use the same password on a bunch of websites you can be almost certain

Sounds like the problem is more that the same password is used in multiple places. If you use the same password on a bunch of websites you can be almost certain that it could be easily compromised somewhere along the line. If you don't use a password manager, it is extremely difficult to not reuse passwords and it's just not going to happen for the lay person. Here's the advice that I give to friends: 1. At the very least, you should have a secure password for only very reputable websites that control valuable information. 2. Use a unique password on your email account. 3. Use another password to sites where security isn't that important.