Great info, but I'm surprised there's no mention of two-factor authentication. I know it's important to switch up your usernames in the future, but for some it may be too late. I know that I've used the same username on several online communities and at this point I couldn't change them. I enabled 2fa on my LastPass account, which automatically creates super strong passwords for me and Toopher, the 2fa program LastPass uses automatically authenticates it when I'm at work or home based on GPS. It's pretty seamless and I feel completely secure using it. I suggest other people look into it!