I typed passwords into a shared note for 3 years until my brother saw it at Thanksgiving
So my brother grabbed my phone at Thanksgiving to look up a recipe and saw my Notes app open. Every login I have was sitting right there in a note called "passwords" because I was too lazy to learn an app. He just stared at me and said my bank info was one unlocked phone away from anyone at that table. I counted it up after and there were 41 accounts in that note, some of them with the same dumb pattern. I switched to a password manager that night but now I'm wondering if 3 years of that was long enough for some of those combos to leak somewhere. I checked one of my emails on a breach site and it showed up in 4 different leaks. My bank login still works fine so I guess I got lucky, but what do you all do about passwords that have already been out there for years? Change everything or just the important ones?