Even though you know you shouldn't

hmhill17

You use the same password or some derivation thereof for a bunch of different websites. What are the chances you think. Then you get a pop up that your AppleID was used to sign in to icloud on a Macbook pro. You don't own a Macbook Pro. Then you find a string of outgoing messages in Chinese going out from your phone. So you change your AppleID password. And then you try to think of every website you used that password for and start going through them and updating it, hoping you got them all...

iMago

lastpass, or even better Keepass, is good to set up and save multiple-really-difficult-to-guess passwords for everything, then all you have to do is remember the master password to the main program each time you need to get in.

and enable two-factor authentication everywhere you can

and NEVER save your credit card info with any website if they give you the option, and if you must, then use a credit card because they're typically way easier to deal with correcting the issue in the event of a hack or identity theft; instead of your debit card, which inevitably leads to your bank account getting drained before you can even pinpoint the problem.