Password security quick basics:

Developers -> use bcrypt

Users -> use a service like Lastpass with a long passphrase as master password; use unique 12+ character (including specials!) passwords through Lastpass