Not using the same password across multiple accounts is the objective here. Once your email account is compromised it is a simple thing for the criminals to take over your life.
I force password changes when there is a large turnover, or a key person leaves. We make sure that all the accounts that we can find are reset.
Biting the hand that feeds IT
