"One of the most critical things a user can do to protect themselves is to use a unique password for every site and never reuse passwords across multiple sites."