Short answer: avoid giving your private data unnecessarily
vice.com/en_us/article/…
Long answer :
Your birthday is usually used to verify your identity over phone calls
Knowing your birthday will enable criminals to act as you over the phone
I always set my birthday to 1st January, so it's easy to remember, and will make it useless to criminals
Contrary to the outdated guideline - you don't need hard to remember passwords.
Use simple words, but LONG, password.
At least 10 characters.
This will make it harder for criminals to hack it via brute-force method.
This ensure that in case of a website breach, you won't be hacked on other websites as well.
This is a common problem.
They tend to have problems after some time - just when you just began to be comfortable with it. Not fun.
Use this simple trick using mainstream tool, such as sha1sum, to EASILY generate passwords, by just remembering one masterkey:
use the "translate" button to read it in English or other languages.
Example :
myemail+facebook@gmail.com
myemail+twitter@gmail.com
All emails to those will be delivered to myemail@gmail.com
Therefore...
Just see, to which email it's addressed to
Then you'll know which website leaked your private data.
Example: fitness center / gym, etc
Unlike password, you can't change your fingerprint 😱😱
(yes, there were gyms (provider) that was hacked & got their biometric database stolen)
Instead use one trusted third-party, and use it to pay everything
I've used Paypal for decades, and never had problem so far.