My friend Jake in Chicago downloaded a password manager after his email got hacked. He was always saying it was too much trouble, but seeing all his accounts at risk changed his mind. Now he even shows our group how to use two-factor auth, which is pretty cool (and a relief). It made me see that once someone gets it, they really get into protecting their stuff.
@robinc25, that point about how people get into protecting their stuff after a scare is spot on. From what I've seen, starting with a password manager that syncs everywhere and using app-based two-factor auth makes a huge difference. It really stops a hacked email from turning into a bigger mess.
My own wake-up call was when my old Yahoo account got popped back in 2014 and I lost a bunch of old photos. I felt like a total idiot for using the same password everywhere. Now I'm that annoying friend who asks if you've turned on 2FA yet, which is a funny turn for someone who used to write passwords on sticky notes. What was the first security habit you actually stuck with?