YES! And they need to be STRONG! 8 to 10 characters; use some caps, numbers, maybe an exclamation point…you can make up little phrases. But a password for each website can get cumbersome. I recommend 3 or 4. Don’t use the same password for your bank that you use for Facebook! And write them down! Date the day you made the change, so later you can find your most recent information. I use my own special abbreviations on my password paper and I keep it hidden, but trying to remember all this isn’t going to work for most people. Lastly, it’s time to update! Be diligent, spend a month and every time you log in somewhere update!