I recently changed most of my online passwords, which was quite an undertaking. I settled onto one generic password for those sites I could care less if someone accessed, but came up with a separate one for each web site that includes any personal or financial information. I have fortunately never been compromised, but have known for a long time that my password protection was sloppy at best.