Two of the most basic password security tips always given is to:
1. use a long password that isn’t easy to guess (i.e. something people know about you) and
2. don’t reuse password’s between two websites
Tip 1 means you will probably forget your own long-hard passwords. Tip 2 means you will need 150 different passwords — multiple banking logins, credit cards, brokerage, each e-mail account, utility companies, employer logins, forums, newspaper websites (WSJ, etc.), etc. etc. etc.
So how is this possible to even recommend? It is practically an impossibility.
So if one website’s password’s is hacked, the hacker will then have access to ALL your websites that use the same e-mail/password combination. And the idea of using a Password Manager to manage your logins is good, except if you need to login from a remote location you won’t have access to it or the login accounts you then need.
So what is a mere mortal to do?