Password re-use is a major risk that can be avoided -- nobody should protect sensitive data with something that can be guessed, like their first name, local football team or favorite band, using hard-to-guess passwords is a strong first step and we recommend combining three random but memorable words. Be creative and use words memorable to you, so people can't guess your password.