Recovering locked Facebook accounts is a nightmare. That’s on purpose.

Create a brand new password for each of your accounts, advised Kaspersky’s Larkina. (As always, any password with the word “password” in it is off-limits.) That way, if one of your passwords is stolen in a breach, hackers can’t use it to break into other accounts. Hackers use bots to stuff commonly used passwords into log-in pages, Larkina said. Instead, go with a string of letters, numbers and symbols. A password manager will help you remember your new, hard-to-guess passwords without writing them down somewhere that isn’t secure — our favorite is Dashlane.