Unpopular opinion: reusing the same password for "junk" accounts is how I got burned at a Sioux Falls hotel
I was logging into the hotel wifi in Sioux Falls and got a fake popup asking me to re-enter my email password to "continue." I typed it in without thinking because it was my junk password I've used on like 30 throwaway sites. Two days later my inbox had password reset emails from three different services and I spent a whole Saturday changing stuff. Now each account gets its own random string from a password manager, even the dumb ones. What's your cutoff for which logins actually deserve a real password?