My "general password" was part of a leak like 8 years ago from some website I use(d)
And I still get a notification from Steam every now and then that someone from Korea or Indonesia is trying to log in to my account lol
Haven't bothered changing it because I use 2 factor authentication on everything I care about.. should I?