Think you’re being clever, substituting that “a” with an “@” symbol? Or tacking your birth year onto your dog’s name? Here’s a truth nobody wants to hear: you’re awful at creating secure passwords.