It's time to use complex, un-rememberable passwords that are unique for each system you use. "unlock" them using a master password that's secure and you can re

It's time to use complex, un-rememberable passwords that are unique for each system you use. "unlock" them using a master password that's secure and you can remember (not 'correct horse battery staple') and that you use FOR NO OTHER SYSTEM. If a site is compromised, you will lose your account on that site regardless of how strong your security for your account is. However, the main problem at the moment is the chain of compromise -- people who use the same credentials and the same username on multiple sites and on 'core' systems like their e-mail account. One site gets compromised, which leaks the same credentials you use for your e-mail address, and all of a sudden they have access to your entire online identity. I use LastPass (http://lastpass.com http://lastpass.com, stores your encrypted passwords remotely so you have to trust lastpass.com) and pay for a premium subscription ($1/month?) with a master password not used elsewhere. But there are other alternatives like http://keepass.info/ http://keepass.info/ (stores your passwords locally, can sync with dropbox. No trusting an external service required.) Also https://agilebits.com/onepassword https://agilebits.com/onepassword (1password), similar to keepass, but not open source (I don't think). Better UI.