have a tiered password scheme..... - tier 1 - financial / most important sites (handful of sites)(banks, liquid assets) - tier 2 - semi important, (credit cards, paypal, etc) - tier 3 - other sites (maybe various passwords, but not one of the above 2) one pword for each tier or well, maybe a couple but generally structure it taht way as u go up tier (toward 1) have there be less accts per password.. no need to go change em all overnight...just start implementing it now and in future its a scheme i came up with over time....and i also read it somewhere that someone else said its good idea....it just makes sense basically: your most important accts have those password be known by less and less places, reduction of risk where it counts most ====== Other tips ====== Dont paste or write important passwords with the username into any medium, call someone to tell them it. also dont use a top tier password for ANY other accts than just those top tier / important ones