A spy virus stole millions of passwords. Here's how to keep your password secure.