It's pretty much good suggestions. But there is one issue if we use strong unique passwords everywhere. How to remember all these passwords!? People have tens or even hundreds accounts on internet websites and it's not easy to remember which password belongs to which website. I'm trying to use unique password on every website and it's common thing that I have to click "forgot password" button on some websites, especially on these which I'm visiting rarely. I hardly can imagine how it can be convenient to use passwords made from random characters like kcfht3gf8 on every website that we are using. We would need to write down all these passwords or what?