Reusing passwords may feel like a harmless shortcut until a single breach opens the door to multiple accounts