I strongly second this recommendation!
If someone figured out the username/email/password combination you used *anywhere* (incl. AWF), they will try the very same combination on a long list of sites (Paypal, Amazon, Microsoft, Ebay, you name it). If it matches anywhere they will use it to their...