Scary to think people still don't use 2FA and worse use
the same password on multiple sites!

Get yourself roboform, LastPass or KeePass. And use the
password generator, simple.
I had my Bittrex account hacked on June 7th and my btc was stolen. I only had a small amount of coins on Bittrex so I didn't make a 2fa. It only just occurred to me this could be the reason. The odd thing is Bittrex sent me a confirmation email and I didn't confirm but they sent the funds anyway.