Use a password manager to generate unique credentials for every single service.
Attackers first targeted obscure forums and small-scale crypto tools where security was an afterthought. 2M COMBOLIST CRYPTO.txt
Even if a user changed their password on one site, "old passwords" found in these combolists often remain dangerous if variants of them are still used elsewhere. Protecting Your Digital Fortune Use a password manager to generate unique credentials