Title: I stopped using the same password for everything. Hackers found me anyway.

Body:

I thought I was smart.

One password for everything. Easy to remember. Never been hacked. Why change?

Then last month, I got an email.

"Someone tried to log into your account from Lagos, Nigeria."

I changed my password. The next week, another alert. Jakarta, Indonesia.

Changed it again. Another alert. Sao Paulo, Brazil.

That's when I learned the truth: I wasn't being hacked. My password was leaked. I just didn't know it.

Where I went wrong

One password for 20+ accounts — One breach means all accounts exposed.

No two-factor authentication — Hackers only need your password. Nothing stops them.

Ignored "password leaked" alerts — Ignorance isn't safety.

What I fixed in one day

Step 1: I went to haveibeenpwned.com and typed my email. Free. Took 10 seconds. Found out my password was in 3 data breaches.

Step 2: I changed every account to a unique password. Used my phone's built-in password manager (Google/Apple both have one free). Now I don't remember my passwords. I don't have to.

Step 3: Turned on two-factor authentication (2FA) for my email, bank, and social media. SMS codes every time I log in. Annoying? Yes. Safe? Yes.

Result: No more login alerts. No more panic. Just peace of mind.

What I learned

Hackers don't target you personally. They buy lists of leaked passwords from data breaches. Then they try those emails and passwords on every website — Gmail, Amazon, Netflix, your bank.

If you reuse passwords, you're not safe. You're just lucky. And luck runs out.

3 things you can do today (free, 10 minutes)