At what point does "good practice" become justified OCD? Not every account is equally important. Have unique passwords for email and financial accounts - absolu

At what point does "good practice" become justified OCD? Not every account is equally important. Have unique passwords for email and financial accounts - absolutely, but does it really matter if someone compromises your HN password? As long you keep that completely separate from anything that can really hurt you, why obsess over it? Despite popular belief, writing down your password and storing it in a lock box is leagues better than storing it online. The number of people who have access to your physical belongings is many orders of magnitude less than the number of people who can attempt to compromise an encrypted database. "Don't write your password down" might have been good advice in the 90s when most people only used a computer at work and the internet wasn't as ubiquitous as it is today.