Passwords are like toilet paper. Don't reuse, don't share ones you've used, & no one should be asking to see what you've used. James Turner (via Twitter)

Why passwords have never been weaker

Generate a unique password for every account that contains any personally identifying information about you. Change your password at least once every six months, and more often for your most sensitive accounts or after you’ve used a network you don’t trust. Change your password immediately if you learn the site it’s used to access has been breached. When signing in to websites, try to use a login URL that begins with “https.
Ars Technica