I would recommend a Password Manager, I use Keeper free version (limited to 1 device) as most of my online activity is off just my laptop. There are many others out there. As dr_nybble pointed out, it only takes one obscure website getting hacked to get your information out there and I was very careful with my banking, credit card , brokerage passwords but very lazy with my one-off online purchases of tools, vacuum cleaner bags etc so I was compromised.

Last audit I had over 250 passwords saved and only about 50 of them are 'secure + unique' so I have been changing them over using Keeper generated passwords a couple a day when I think about it

With all due respect to ForceFlow that link is pretty much useless. Everyone should be taking online security serious regardless if your email shows on that site or not - the steps to protect yourself are the same for both groups.