And if hackers have the password for one site, they can try it on others to see if you reused it. So how do you know when your passwords have been breached, and what do you do about it?