Important Recommendation to Change and Update Passwords

They have a pretty good analysis on the official cloudflare blog. It does seem fairly unlikely that any malicious people found and utilized the bug.

Still it isn't the greatest of ideas to reuse your password on multiple sites. While that is easier, if you do choose to use the same passwords... make sure the sites in question are not important in the least. No email, no banking/credit/taxes/shopping/etc. Nothing that deals with your real private info(Facebook etc). No dating sites. If you have an online persona you consider important, no sites that use this persona/handle.

Those important sites should each have a password that is
1. Individual. Never shared with another site.
2. Reasonably complex password. Something like fsH3h_Tss249$y^M etc. Don't actually use that password(because I just posted it on a public forum post).

Longer passwords are more secure.
Passwords with a mixture of lower and upper case are more secure than those without.
Passwords with numbers are more secure than those without.
Passwords with symbols are far more secure than those without.
Passwords including things like your name, your kid's name, your pet's name, or other information that someone might be able to find out somehow - those passwords are less secure than without.
Passwords that use things like your birthday - or worse - your SSN are terrible ideas. If they ever get dumped in a data breach, that password becomes info about you.

You might consider a password manager for such things.

Challenge questions(what you get asked if you forget your password) shouldn't contain the real information about you that could be found on a public profile. For example "what is your dog's name" and you talk about your dog on Facebook, Twitter, etc. It becomes trivial to take your account.

2 factor authentication - where available - is pretty useful in securing your accounts.

 

Okay this is not good at all. Thank you very much for the warning.