You are right lol I spoke to the person who had my account all afternoon today appereantly EVERYTHING was breached Twitch Twitter facebook GoG Discord my email. My own fault for having the same password everywhere lol.
But we resolved it between the both us and we are both talking to support now. Also told him if infact he was duped that I would pay him back whatever he had paid for the account. I dont like it when people treat other people this way.

Appereantly he paid 40 bucks for the account but the guy wanted 60 when he stopped paying at 40 cause he couldnt pay anymore the guy or woman became a bit shady and hostile.

I hope you'll entangle this mess with the support team. And next time leave 2FA on and don't reuse passwords. Keepass for example is a good password manager.

Nah my new password(s) is on a piece of paper save here untill its stuck in my memory all though I think its smarter to change it every month lol

Not trying to convince you to work in any way than what you feels most comfortable with, but I'd like to add my voice to what blotunga said.

A password manager such as Keepass is a great tool - you need to remember only a single password (that to the password manager), and it keeps track of everything else, this means you can have long random passwords that would be near impossible to remember, and you can have different passwords for everything.

I only have a few passwords that I do remember, and that I have chosen myself (local user accounts on my devices, GOG, my primary e-mail account, Google, and a couple others), while the passwords for most of the several dozens of services I have accounts to are randomly created by the password manager and stored in the database (which I have a couple backups of) - for example, I have no idea what my passwords to eBay, Paypal, or Imgur are, and I don't have to remember them because those are not services I commonly access from different devices, that can wait until I can use the password manager. Not having to remember them also means I can change them as often as I wish, because there's no risk of forgetting the password I recently changed to and being confused as to why the (old) one I do remember isn't working.

I have my own formula for different passwords for every site in my brain and can remember them all this way.
Being dependent on a program for this has the upside of extremely hard to crack passwords but the downsides of a) having to trust the program you entered your password(s) into itself and b) not being able to access services from any device on the go.

If that works for you and you thus don't need a password manager, awesome.

I, however, can't remember that many passwords, or that many password formulas. At the same time, I usually only use them at home and possibly at work. I have a USB stick with the database and the application for use at work and if I need one of the services while helping relatives, and I could install a Keepass compatible application on my cellphone and sync the database regularly if I figure I'd like even more mobile access.

It depends how much passwords you have and how much sites.. the problem is this: manual method makes periodical password refresh - a pain, the leaked or stolen hashes today pose a problem, that can result in loosing account if password is not changed or is similar across.

The password program doesn't have to be one that is well known. In fact, it should not be, it must be complete offline or without relying on any servers, leaving no traces and storing the DB in places YOU choose.

Also, you do not have to put every single password in there.