A leak of 16 billion passwords from services including Apple, Google and Facebook poses serious risks for crypto holders.