“Fifty-five percent of people use the same password across most Web sites, and 40 percent don’t even bother to use one at all on their smart phones.”