If it wasn’t clear before, it certainly is now: Your username and password are almost impossible to keep safe.