I have 176 logins/accounts. How many do you have?
Here is a screenshot of my Bitwarden: https://imgur.com/a/UdG7Inb
They include some really important things such as:
Health insurance
G-Suite for work
Bill.com (which I use to get paid)
IRS.gov (which I use to get un-paid)
UK Companies House Register
Interactive Brokers
My bank
Obviously, anything with OAuth is "bundled" into my Google account. So if anything this is a huge underestimate.
I'm asking because of how insane auth has become. I know companies like OnePassword and Bitwarden are working on this and overall they do a great job. But I still have a near-stroke every time I have to do the "forgot my password" loop, or use Duo Mobile/other 2FA.
The only really good auth feature I've ever encountered has been Apple's "fill from Messages" feature as well as their Touch.
If I need to login to your site less than once or twice a year, "Forgot my password" is my password manager. Personally, I feel that the utility of me working to keep and maintain that information in a database for high availability is essentially zero.
As a result, I store very few accounts overall and checking out as "guest" hasn't been a problem of any sort. There's like 10 critical things that I feel the need to store the password on and they all use a hardware key for 2fa anyways.
For the two accounts that I absolutely can't lose access to, I just used the "Correct Horse Battery Staple" method and came up with two very long and secure passwords that I have no trouble remembering.
Around 300 at this point, sans any deleted ones. I don't think I know a single password anymore, since they're all randomized and separate for each site.
> Obviously, anything with OAuth is "bundled" into my Google account.
Maybe it's just me, but I try to never use centralized identity providers (outside of things that I really don't care about) and use separate e-mail auth whenever possible, across multiple e-mail accounts (some self-hosted). Same with considering separate Google accounts for phones, services like e-mail, a separate one for any content creation on YouTube and so on (ideally without any of them coming in contact with one another).
The idea is that one account getting closed/suspended shouldn't result in ALL of the linked stuff becoming inaccessible. I don't even do anything weird online, it's just that nowadays you hear lots of stories about people getting banned based on some heuristics by automated systems, with no ways of getting in contact with the support. Even something like a VPN might trip those systems up. Similar things have happened to me before (a SaaS provider didn't want to do business with me) for no good reason even without a VPN, but trying a year later with the same credit card didn't result in the other account being auto-suspended. How odd.
I guess the next step would be to have usernames, phone numbers and even payment methods (apparently virtual credit cards sometimes work) also be more randomized and more compartmentalized, though something tells me it'd be a pain to do that. That said, I largely believe that privacy online is mostly dead due to how much fingerprinting there is, though one can still protect themselves from automated systems acting weird, because nobody genuinely cares about that, at least at the scale where they're needed.
176 sounded so low to me I wasn’t sure if you were talking about for all sites or just HN alts.
I'm probably the one with the least.
I have 35 in my password manager. I purge the ones I don't need every 2 or 3 months. I even gave away GOG and Steam accounts to friends after years of not playing games.
Sometimes I have to send a threatening email to delete some accounts. Currently there's about 2 I'm waiting for an answer.
It's gotten worse lately: people just don't delete your account anymore :D. Because of that, I use "hide my email" and put fake personal data pretty much everywhere now. When I REALLY don't care or am just checking the service, I use a burner email.
I honestly wish I had close to zero. I really hate SaaS and I really hate websites that require a login for stupid stuff (like... a barbershop that needs login/password for scheduling haircuts? fuck off).
The elites don’t want you to know this but the accounts on the Internet are free you can take them home I have 458 accounts.
Shit, just looking at the replies, there's a solid case for password managers. No normal human is going to memorize 100+ unique passwords meeting various complexity requirements. It almost makes shaming people for re-using passwords look like you're out of touch. Of course they're following bad practices, how could they not be?!
The most infuriating auth-related thing for me is the companies that insist on doing phone-based 2FA. I'm inextricably linked to my specific phone number at this point in a way that previously was only an issue with my email address.
940 in 1Password (I feel a lightweight that I haven't hit 4 figures yet). Stopped fighting a while back and signed up to the cloud version instead of just having Dropbox backups, partly to help onboard my family better. Haven't regretted it yet, obviously will do if/when I find out all my stuff has been hacked but blah.
Don't have numbers for my work machine upstairs, but on my phone here's how recently they were all used:
1 Day: 1
2 Days: 1
14 Days: 3
30 Days: 3
60 Days: 8
90 Days: 6
So, mostly cruft. I have a lot of stuff still done via Google auth, despite migrating all my domains and email to Fastmail couple of years back (which has been flawless since). Also, just checked, and I only have 27 entries in Authy.
Why keep score? If you have a password manager, the number is irrelevant. But: KeePass 2052. Cheating because I work for an agency... so we have hundreds of clients' passwords to store and selectively distribute to the team.
Interesting question! I just checked and, wow, I have 922 accounts in 1password. (From 10+ years of use.)
It’s funny you bring this up because I’ve thought about “cleaning up” 1password before. But all the extra accounts are not really in my way.
I never use oauth (like to create a new account / password for everything). All of my work-related accounts are in there from several employers. Lots of passwords for (probably dead) servers. I count 28 logins for salesforce.com from past employers, various sandboxes, and consulting gigs.
I would not expect any true innovation to come from companies such as 1Password or Bitwarden. They make money off authentication being so craapy that an entire class of applications has sprung up around it.
They will not innovate themselves out of existence.
Still using 1Password 7 and its self-hosted vaults with the 1Password app denied all network access.
This is good reminder that I should login to all my old Google accounts to keep them from being deleted since Google is finally making moves to erase accounts unused for over 2 years. (especially given how it's always getting more difficult to create new G accounts)
$ pass | wc -l
321
17 of those are encrypted notes (API tokens, license keys, etc.).
`pass` is a command line password manager: https://www.passwordstore.org/
270 login credentials work+personal. I don't use 'sign in with Google'. I regularly try (not always successfully) to go through my 1Password vault and delete accounts that I haven't used in a while.
(I wish 1Password let you order credentials by "last used". This way I could start deleting from the oldest last used accounts.)
I wish I had less accounts because each account means some random website holding my data hostage. It's too common that a website doesn't allow you to delete an account. Sometimes you can find a support email and request a deletion. Other times, all I can do is try to replace my data with junk data. Although, even that isn't possible sometimes!
(Rocketbook won't let you change your email, for example. Or ChatGPT saves your phone number after you delete your account.)
Definitely a relevant topic, I'd say, especially if the discussion help any stragglers over the "edge" into finally using a password manager. (As far as I'm concerned, it is absolutely a requisite for all digital citizens in 2023.) ((And kinda has been for 10+ years but ya know.))
I'm closing in on 5000 credentials in 1Password, personally, but my collected vaults/database is 15+ years old now and definitely has [problematic duplicates](https://github.com/1Password/solutions/issues/1).
After a lengthy-enough sample of semi-formal self-observation, I'm averaging:
- signing in/authenticating 10 times/day (including weekends,) and most of those are repeats with the same service.
- Almost 10 new accounts/credentials per week. (Granted, I'm pretty darn indiscriminate about doing so while exploring.)
Without tangenting too far, if anyone has any advice about how to constructively normalize password management (even just as an abstract) for end users - whatever that may mean - I'd love to hear it.
So if anything with OAuth is tied to Google, how would you survive losing your Google account?
I have almost 1900 items in my password manager: this includes logins, software licenses, notes, etc. But this does not include items in vault Attic, where I move items which are no longer exist (dead sites, deleted accounts, old ids, etc).
I have 573 entries in my KeePassXC. I have several very important passwords that are not in there, like my work password and of course the keepass safe password. Auth is indeed insane. Because of this insane power, I don't trust any ID provider with my logins, not Google, nor any other third party, so I log in with a password everywhere.
As for maintenance, I don't think it's much, and I'm not even using the browser integration (again, for security). It's a few simple clicks to create a new entry, and the default auto-fill (username, tab, password, enter) works on most of the websites.
About 500, after a clear up.
I'm currently shopping around for a new password manager but that's proving to be a frustrating search. Bitwarden scrambled my master password so that I lost access, not just once but twice (password was saved in another password manager, so definitely correct). Lastpass has 'issues'. Dashlane web app only gives me an error message. 1Password feels clunky but may be what I end up going with. Needs to be usable & shareable by tech-averse spouse & children as well, so hosting my own isn't really an option.
I really don't know how many accounts I have, for most of them I don't even store passwords, I just generate them in a deterministic way with a little password generator I made[0].
Some time ago I realized what a waste was to store so many secrets, even more knowing that for the most part I'll probably never need them again.
For the - proportionally few - important secrets, I use (and really like) Pass[1].
[0]: https://aprico.org
[1]: https://www.passwordstore.org/
> But I still have a near-stroke every time I have to do the "forgot my password" loop, or use Duo Mobile/other 2FA.
That's funny, I've stopped caring about remembering most passwords and use the "forgot my password" loop as a login mechanism for rarely accessed sites/services. I also only enable 2FA on important ones like email, github, or banking. Basically my threat model includes my ability to lose things.
944 items in 1Password (fingerprint me!)
I'd have more but even 1Password doesn't always catch when I'm creating an account login, or resetting a password, etc. I do the work to input some of them, but not always (I get lazy).
I do try a lot of tools, and I have a lot of personal and professional GMail OATH logins too, which -- fortunately -- 1Password now tracks.
I don't use OAuth, except for two services - which I could switch to user/pass if I really wanted.
380+ logins on bitwarden
45+ 2FA on Authy
2 yubikeys
It gets... pretty confusing, especially as I've not checked the gopass repo, where I keep _other_ stuff, too...
Bitwarden lists 791. A ton of them are for internal services/local dev accounts/what have you, but that's still a pretty long list.
I don't use most of them. A third of them are for my spam email address. I'm starting to notice Bitwarden taking its sweet time decrypting them all, though.
According to bitwarden, I have 363. Though, I have more than that that are not stored in bitwarden. Some of them are my work accounts, others are ones I created while on mobile where it is a pain to add them to bitwarden. The real number is closer to 400.
Where I work 'Single Sign On' doesn't live up to its name; many of us spend the first 5 minutes of each day signing into things, waiting for the 2FA code, entering it, then rinse and repeating for a half-dozen apps.
The problem with this metric is that several of those accounts are defunct or no longer even in existence. It's much easier to add to my keypass than to delete from it
751 entries in my KeePassXC database. I'm sure a number of those accounts are for long-dead sites, and many of the rest are throwaways I don't expect to use again.
Over 300 in a self-hosted vaultwarden.
I’ve got my vault password memorized but that’s about it. All 300+ are secure randomly generated ones that I do not know. And I’ve got 2FA stored there too.
Despite the huge number of accounts, logging into anything is seamless across any of my devices. And access to my vaultwarden is securely protected. Password managers are great. Really looking forward to vaultwarden eventually storing Passkeys as well, and using passkeys to login instead.
Slightly below 2000 last time I looked. Most sites don't support deleting content or accounts. In best case they just "anonymize" you. So it just keeps growing...
1146 in Bitwarden. But a lot of them are old, and some accounts aren't in BW.
> Obviously, anything with OAuth is "bundled" into my Google account.
I too used to live dangerously. But then I took an arrow... sorry, wrong one... then I read too many stories about "Google locked my account and now my life is ruined" and stopped using Google auth with anything but the least important sites on which I wouldn't mind losing the login.
HN and a few forums, bank, email/cloud, website (which is really just storage for ancient stuff I have mostly forgotten but occasionally have a use for) and that is about it. I use guest checkout when ever possible and if I buy from a site which does not offer it I just close my account as soon as I finish checking out. I never made the switch to password managers and the like. I have all of my passwords memorized.
KeePass says 305. That's a few decades' worth of logins across everything from Yahoo! to GMail to random online storefronts. Unique password for each. Doesn't include old accounts I've deleted where possible. Not all services offer account deletion, sadly. When I can't delete an account I leave it with blank or garbage contact info and link it to a one-off email alias for spam prevention.
I have 728. Before Bitwarden I used password store. I migrated with a script about 2 years ago, and I still don't have all the necessary metadata in at least a half (meaning there is no icon, usernames are messy, etc). I only update the old entries whenever the accounts are needed, meaning that I haven't used half of them in 2 years. So I "actively" use about 360 accounts on various services.
I have over 300 on 1Password, some with more than 5 different accounts from the same site like Google and Slack. I also lean heavily on the 1Password extensions to help on the retrieval part.
It's incredibly insane but I manage it by adding a namespace postfix so it's easier to identify which when autocompleting login forms. For example, "Google (Personal), "Google (UMich)" etc.
952, I store accounts user and passwords that I have since 2011, and I like to try new services. Especially to give feedback to makers.
I'm pushing 600 in my main password manager, but most of them aren't unique — I just use "farce72$" by default since it hasn't shown up in HIBP (yet -- fingers crossed) and hits three of the major character classes, so it's pretty high-entropy.
The password manager mostly serves the role of autofilling stuff in browsers.
Uh, looks like 1200. A few duplicates from LastPass or the LastPass -> 1Password migration many years ago, I forget.
1456 items in Bitwarden; 1180 have both username and password but there's a lot of duplication - e.g. I've got 6 items for my local nzbget instance (all the same u/p combo.)
This is an accumulation since ~2010 starting with 1Password, then LastPass, then Bitwarden.
[edit: 1339 items have a password but only 1180 of those also have a username]
Roughly 350, all with unique passwords and mostly with unique email addresses too. They're categorised, and the only categories with more than about 20 entries are catch-alls I never look at anyway. It's pretty useful and sometimes interesting to go on a website and find out I made an account there two years ago.
I'm running around 838 accounts because why not? I have a unique password for each login since five years ago. I went from LastPass to 1Password and finally settled on self-hosted Bitwarden(Vaultwarden) a year ago.
531 in my bitwarden storage. I don't create an account unless absolutely necessary. So the number is higher than I thought.
I guess most of it is likely work related. I cycle through many projects. Each of them have many accounts tied to them. Eg: DNS, domain, hosting, etc etc. Not to mention all the business systems like HR.
There are 92 entries in my credentials archive. I try to avoid creating them if at all possible, and I never use OAuth.
Checking 1Password, I have 283. If I include sites I keep only in my brain that is probably a touch above 300.
In Firefox's about:logins I have 1333 saved credentials
My keepass says 484, but I have a feeling there's duplicates. I really need to curate these better.
I've got about 307 on KeePassXC, with the oldest generated password from 2016.
307 includes stuff like security questions as well though, so the answer to "What is your mother's maiden name?" tends to be something along the lines of "f+2Tng+DO?X).`W/7*5IQ_"
My BW stands at 52 logins right now, but it's not yet quite complete. I think I'm missing a couple banks. Over the last year or so however, I cancelled almost 100 accounts, ranging from obscure forums, trough hosting providers, to facebook. It was a herculian effort, as companies put up emmense barriers (especially the hosting companies), but I somehow got it to the minimum I can realistically have - which is roughly 60 I think.
I try to avoid SSO, only exceptions are a single forum, which had broken registration, and my uni. Why? 1. SSO is a single point of failure, which you (unlike BW) cannot audit yourself; 2. You have to trust it's not gonna sell your data - perfect graph of services one person has is of course very juicy information; 3. They the make management of one's accounts slightly harder, as you cannot easily know how many you have by looking into your BW; 4. You are locked into your SSO service.
For MFA, I use fido keys (yubikeys), which I have to highly, highly recommend. Not only are they miles ahead of anything else, but they are also so easy and quick to use. I have a little one permanently in my usb port and to log in you just touch it. I'd recommend this if you are MFA-fatigued. Obviously, I always take the best form of 2FA available regardless.
All passwords in BW are long random alphanumeric and I have a XKCD-style password for that and something similar for FDE/logins into computers.
BTW, getting BW was the best decision I could have made, not really for security (although that's obviously the point) but fkr convinience. No more silly variants on passwords and no more guessing emails for reset.
I have 967 entries in my KeePassXC database. That includes tons of now obsolete logins and passwords from previous jobs or/and defunct services. It doesn't bother me, and I dont want to spend days just to validate/clean up it.
Hard to know, I have 20 to 30 Facebook accounts, mostly bought from account seller sites, becaused I wanted to see various Facebook pages not accessible to outsiders. Not sure how many of these passwords still work.
My oldest working account is probably 1996's ICQ.
My keychain has 54 items in it. I think at least 5 of them belong to things I've shut down.
I have 358 keys in my keepassxc. Loads of them are from a distant past; I never had the urge to clean them up. If I delete a password I also want the account to be deleted so that costs too much time... now at least I know who knows me... ?
My password manager has four digits of credentials stored. It dates back to when years began with the digit 1. Certainly _most_ of those are no longer in use, but maybe the time has come to see if Taco is still posting to Chips & Dips.
My password manager says 407 currently in my vault. I only use social login for very very limited amount of sites. My default option is to create app/site specific accounts so I can append my email with +sitename to see who leaks my data.
Exactly 256 in Keepass currently.
Earlier I used to maintain the passwords in an Excel and the life in a way changed when I discovered Password Manager KeePassXC - which is amazing.
For my frequently accessed accounts, I also prefer Apple Keychain to login faster across the devices.
360 for websites (most of which I've only used once; the oldest are dated 2011, but those are probably import dates, as they all have the same timestamp), and 100 or so for more serious stuff (banking, routers, etc.) in KeePassXC.
I have 93 personal accounts in my Bitwarden, plus 13 that I have categorized as "deprecated".
I don't think 176 is wildly unusual; it may be a bit higher than some people, but it's certainly not a Guinness World Record or anything like that.
808 in my password manager, plus a few in my head (stuff like bank logins and the pwd manager's password) or cold storage (no e-money, but e.g. the manager's password and passwords to unlock system backups).
I have over a thousand and hundreds of warning about compromised passwords.
Annoyingly they're all for forums I was part of as a teenager 15-20 years ago with a dead email address referencing pink monkeys.
I just never get round to cleaning it up.
284; that's with actively trying to purge the list every 3-6 months (sometimes just an online form but for more obscure / smaller sites, it's a couple of weeks and chains of emails back and forth).
Presently I have 384 entries in KeepassXC, but it's not all online accounts. Sometimes I just put info in my keepass vault because I want to have easy access to it while I'm at my computer.
It's a good day if I can get through it without creating an account.
700 plus on Bitwarden.
And a lot of Oauth with google and GitHub.
200 plus on Chrome personalised window.
Around 100 on Samsung pass for apps that I don't have access on web.
746 accounts.
746 unique passwords, ~600 unique usernames, ~600 unique email addresses.
More than 1000. More than I'd like. I can't help but wonder how many websites my personal information is on at this point between random shopping, forums, and all the rest.
1,742 according to my Bitwarden on Logins :grimace:
Given my use of password managers goes back to pre 2000 I'm willing to bet a sizeable percentage of the sites don't even exist any more
I have over 4,000
This is because I rotate accounts frequently (well, besides here).
376 items accumulated over 12 years using password manager and multiple cleanup runs. I think top for me was around 480.
It was hard to find it in the new version of 1password
~15,000 after being online since the '90s. A lot of them won't work anymore, that much I'm certain of. A lot of things have come and gone in that time.
> Obviously, anything with OAuth is "bundled" into my Google account. So if anything this is a huge underestimate.
If Google ever pulls the plug on you, you're in for a bad time.
1112+, plus 25 in Microsoft Authenticator w/ cloud backup enabled, and a Yubikey 5c FIPS for every device I care about.
Between 3,000 and 4,000 (1Password no longer shows the count).
Over 100 in my password manager. I use log in with Apple wherever possible. If a website does not matter and does not support Oauth with Apple, I will use Google.
899 in Bitwarden and that is after cleaning and excludes ‘lazy’ accounts I logged into with google or facebook (those I generally don’t use or find important).
600 in Chrome. 800 in iCloud Keychain. I assume there's a % of duplication between the two, since I don't really use Chrome anymore outside of Windows.
Went and checked my 1Password. Apparently, I have nearly 1,800! My oldest remaining password was created in 2010, so I've been using it for a while.
445 logins for me on a self hosted bitwarden (vaultwarden) instance. Although a lot of those are for user & root logins to local machines I provision.
1,226 items in my 1Password database. Very happy customer.
410 according to 1 Password. I do periodic cleanups though and I should probably do one soon so the number of actual, in use, logins is probably lower.
Please tell me you let chrome save and sync your passwords lol. Always a delight for pentesters and real attackers a like when people do that.
206
Not counting all the sites for which I use the "Log in with Google/Facebook/etc". Many of these credentials I haven't used for years.
About 200, but no more than 30 are used often and maybe 5 are important.
I don't want to tell how I store them, but for these 5, I could even memorize them.
Around 1,000 in 1password. I use 1password because many of them are shared.
Edit. That is only my work 1pass. I have a personal instance too with a few hundred.
1078 - many I of them I've used once
Bitwarden lists 1,601 for me. That's not counting sites that use Google, GitHub, et al. for auth which I will often choose if offered.
Who knows, some idiot keeps using my email and signing up on various spammy services. Probably time to get a new email address.
I see many people mentioning the number of passwords in their KeepassXC. I can't find the option for that. Where is it?
Before posting I was looking at the comments to see how bad I was… after seeing 1k+ it seems like I’m fine with my 627 bitwarden items!
this is nuts, i was expecting people to say like 8
Maybe 200ish or so
Loads of old crap though. Will clean it out next time I'm migrating passwd managers. Probably 50-ish that actually matter
I have 7, unless you include logins to the various systems and servers attached to my network. Then I have ~100.
800 logins in my Bitwarden.
These are logins I collected over the last 15 years. A lot of them are for pages that don’t event exist anymore.
I have around 40 2fa codes alone, number of accounts I don't even care to count.
find .password-store -type f | wc -l says 1248.
$ pwd && fd --type file | count
/home/daniel/.home/.password-store
512
Need some cleanup I supposed...
515 - thank you Jesus for password managers
1Password tells me I have 4,182 items... and that's probably not even everything.
1Password says 348 for me, and I know there's many more that are autogenerated and stored in a keychain.
1300 as per 1Password.. and must be 500+ in my old Firefox account that I didn't bother exporting.
3,995 by 1Password as of May 21, 2023.
1Password currently has me at 476 logins, I assume some of those are duplicate accounts or burners.
238 according to 1Password. Every time I add a new one I feel a piece of my soul leave my body.
2151 according to Bitwarden. That's what 25 years of actively using internet does to you :)
What is bitwarden doing to help lower the number of accounts, exactly? I'm out of the loop.
And I thought I was out of hand with 496 in 1Password… now it feels quaint looking around here.
809 in Bitwarden. Collected and migrated over the years from lastpass to enpass to bitwarden.
203 according to 1password, but I archive the ones I don't need roughly every year.
I have 260 items in my vault. Of course, I'm sure it could use some tidying up.
1Password deleted more of my accounts than that when it crashed the v8 upgrade.
SK
1105 according to Keepass. Although at least a third of these are no longer active.
Anyone experimented with Sign in With Ethereum?
Wallet based login and account management onchain.
319, currently using Bitwarden to manage them and been pretty happy with it so far
about 750 in my personal 'pass' store, and about a 1000 in the shared password store for work. Bitwarden probably has a significant subset, but I prefer to keep 'pass' as authoritative source.
Personal ones close to that. But as a contractor, way more than than 176.
About 1,400 in KeePass.
Perhaps a poll would with ranges would have been better.
0-100
101-300
301-800
801-1200
1200+
1906 items in my 1Password. Not including those I archived or deleted.
636, and I lost a lot of them about 9 years ago.
I’m honestly surprised I’m not over 750.
You mean since I started using the internet in 1995? Or only live ones
1361 in 1Password, probably ~100 that I use at least once per year.
Looks like I have 2160 in Strongbox (recently moved from 1Password).
A bit under 200, but only around 20 that I use with any regularity.
My Bitwarden says 1,703.
I'm surprised to see so many people with low hundreds.
312 entries, although only 37 were accessed in the last 12 months.
182 logins here, although most of them aren't used frequently.
imo the best way to handle this would be to have identities on browsers, and then have browsers automatically handle the logins without the user seening any passwords
I feel like this isn't healthy for a human being
I have 921 items in 1Password; most of them are logins.
800+ entries linked to 784 unique email addresses.
Hundreds. I’ve lost count they’re all in 1Password.
I currently have 344 accounts in my password manager.
611 entries in my password database (pwsafe.org)
241 in 1password
340 in Google Password Manager
I'm not joking... I have 69 logins lol
Over 500, though I have no idea how many of them still exist. I use a password manager and unique email addresses, why would I care how many accounts I have?
Over 1000 entries in my password Tracker.
I have 454 logins in the Bitwarden
Personal ~10
Work related maybe ~20
According to Bitwarden, 479 accounts
437, accumulated over 2 decades
183 after some recent cleanup
1322 currently in Bitwarden
886 according to keepassxc
467, says my Bitwarden :)
Right now, 90-ish, but I used to have many more. Lately, I'm religiously deleting accounts (which I finally am able to, thanks to GDPR).
1) Avoid making accounts in the first place. You almost never actually need one.
2) Recognize that for nearly all sites keeping your account secure is more their problem because they're trying to fight spam than it is your problem.
I think I have about five logins that actually matter and the rest maybe they work or maybe I have to ask for a password reset/new account when I use the service.