So use a good password, and don't use an untrustworthy OpenID provider. Most sites will send auth details by email if you forget your password; having your ema

So use a good password, and don't use an untrustworthy OpenID provider. Most sites will send auth details by email if you forget your password; having your email password taken is just as much a risk as having your OpenID password taken.