I ran across a good article that covers some very good best practices on password management. If you take anything away, take these two things from it: Use a different password for EVERY account and create password that are alpha numeric, various case, with at least one symbol.
http://www.cnbc.com/2016/02/24/8-ways-to-protect-your-passwords-from-identity-theft-online.html?__source=msn%7Cmoney%7Cheadline%7Cstory%7C&par=msn