[VPenkov]

It's better to start late than never. You probably have only a handful of high-value accounts. Emails, hosting, domain names, utility providers, social media.

Then you can focus on anyone who has your private data. E-shops and such that store your address. Realistically those can be pretty damaging if they get breached - even if your password doesn't leak in plain text, your name and address would be up for grabs.

But think about adopting the habit of gradually building up your discipline and addressing old issues as you revisit old accounts.