I once didn't protect gamer accounts ("only..."). I also have a bunch of accounts that got hacked and places where I couldn't game again using the same e-mail address. No, I don't break the cardinal rule; I use singular passwords. Sure, that means one letter or less--or else one per site, and complicated.