I do the same with passwords as I do with e-mail. I have a "public" username and password, that I use to get access to sites that require registration, whether news sites, Poser sites, mailing lists, or whatever. I don't bother to change my public password regularly, as I do my others. If the public password is breached, it may be annoying, but they won't get any money or any personal information.