Password reuse allows fraudsters to use credentials stolen on one website to take over accounts on other sites.