Long, unique passwords beat clever ones — but only if your family will actually use them.
Rule 1 — One password, one account. Reused passwords are the #1 reason households get popped. A leak at one site instantly becomes a leak at every site that shared the password.
Rule 2 — Length over symbols. A 16-character passphrase ("river-otter-pancake-rocket") is dramatically stronger than "P@ssw0rd1!" and easier to type.
Rule 3 — A password manager you all use. Pick one. Put it on every phone. Add a shared family vault for streaming logins so kids don't ask for the Netflix password in the WhatsApp group.
Once those three are in place, breach alerts stop being scary — they become "rotate that one, move on."