Using distinct credentials for critical services can limit the damage caused by phishing, password reuse, and compromised accounts.