I have gotten at least 4 calls in as many months from people whose email accounts have been hacked. Some of them even had passwords that I would have considered decent. The bastards sent spam out to all of their contacts.
Your passwords need:
- At least 10 characters
- At least two letters
- At least one capital letter
- At least two numbers
- At least one non-alphanumeric character
Eventually, we will all be hacked unless we take these precautions.