Originally Posted by DiapDealer

'zactly.

Everybody's gotta do what helps them sleep better at night. I get that. But here's the three scenarios I currently see regarding Heartbleed:

1. They already got my personal info and I'm already screwed--even if I change my password now.
   
2. I changed my password in time, but the site hasn't been patched against Heartbleed and my personal info is still vulnerable.
   
3. The site has already closed the Heartbleed hole, and I'm changing my password because it's just good practice.

Other than making sure my passwords aren't silly-simple, I've come to the realization that I really don't have a single bit of control over my own online "security."

Even if I had absolutely no online accounts, the companies, and financial institutions I did business with would still store my personal info in hackable databases. *shrug*

Originally Posted by daffy4u

Mashable has a chart that's a little easier to read.

http://mashable.com/2014/04/09/heart...ites-affected/

I use LastPass and have been changing passwords as advised (sometimes you have to wait for sites to update their certificates).