Despite years of being told we should have strong and unique passwords, people are still using predictable patterns to secure access to their online lives.