Having to live our virtual lives with a stack of user names and passwords is a real pain.
I guess many people will use the same password, or the same password root and just add a new suffix if forced to change (eg. peterpassmore2016).
What with user leaks (where user-error allows passwords to be revealed) or company leaks (where a company accidentally releases user account details), we really should take internet security more seriously.