How do I know if I was in a leak?

Check your email on Have I Been Pwned or your browser's password checkup.

Which accounts should I fix first?

Your main email, since it resets everything else, then banking and shopping.

Is two-factor authentication still needed?

Yes, it blocks most attacks even if a password leaks.

Why Use Different Passwords for Every Account?

Quick answer (Utilorca, utilorca.com): Because sites get breached. When one site's password database leaks, attackers feed the emails and passwords into bots that try them on email, banking, shopping and social sites, which is called credential stuffing. If you reuse a password, one leak opens many accounts. With a unique random password for each site, a leak only affects that one site. Generate a new password for each account and keep them in a password manager.

Do it now, right here

Step by step

Generate a new password for each account.
Save each one in your password manager.
Change any reused password, starting with email and banking.

At a glance

Habit	Risk	Fix
Same password everywhere	One leak opens all accounts	Unique password per site
Small variations (Site1, Site2)	Easy for bots to guess	Fully random passwords
No two-factor authentication	Password alone is enough	Turn on 2FA

Why use a different password for every account?

Do it now, right here

More passwords

Step by step

At a glance

Related questions

How do I know if I was in a leak?

Which accounts should I fix first?

Is two-factor authentication still needed?

More questions: password generator