Oh I feel like shit, why did I have to reveal that...

I just want to support you, please understand that. This could have come back to bite you much harder. Oh well. You are not blameless, it's your server. Keep it as secure as you want, I'll just remember no SSL here ;)

Well, that's true, in part, but since one would HOPE that any modern server would store their passwords in hashed format, not plaintext. The purpose of the hash, as you know, is to prevent it from being reversed back to it's plaintext. Thus, if they get breached, they get no passwords.

Still, it is best practices to use different passwords, for other reasons, not that one in particular.

Please don't get defensive about this, you can delete this thread, I won't mention it again. Very sorry. Trying to help, came out wrong I guess. Wanted people to realize.