I have a confession. Sometimes I reuse passwords. Not for anything that "matters", but I've ended up using a couple of passwords a lot of times. And inevitably some of those sites get hacked. But where did I use them?
Chrome remembers all my passwords but unfortunately doesn't seem to offer a straightforward API to get at them. Conveniently they do sync my passwords to my computer's password store and there's an API for that.
I wrote a little script and I've been going through generating unique passwords for all the unimportant sites and turning two-factor authentication on where it's offered. The Secret Service database (and Chrome) seem to sometimes end up with multiple entries for a single site, and Chrome doesn't seem to sync my updates immediately, but I've found this a helpful start.
[embed]https://gist.github.com/ianloic/b32db4dfd8d03a3c0ffbb4d1eca9be6a[/embed]