1. Never reuse passwords
2. Use passphrases http://en.wikipedia.org/wiki/Passphrase like “IwatchWalkingDeadat700pm”
3. Use a couple of email addresses for your various social networks, ebay and
one for business contacts.
4. Do not repeat a username or handle or any variant
there of it makes it easy to track someone across the internet
Many are using http://hashcat.net/oclhashcat-lite/ to crack the passwords.
If you find a hashed password such as efb2f7d6542130f7a1e90cf5ec607ad1 then oclhashcat can run billions password attempts until it succeeds by trying all combinations of upper/lower case and digits.
One thing to note is that password cracking tools aren’t guaranteed to give you
the actual password.