[gekko]

I had my gmail disabled once (and panicked, since having an email account lets you recover an account at almost every site you ever visit). I believe they did send me a response, though it appeared fairly automated. Something along the lines of I sent out 250 emails in a very short time, and they said it occurred at a time when I would be sleeping.

Worst part about it was when it happened, it was the same password I used for everything. I had recently started using a password management program, so immediately started taking the idea of using a unique password for each site a bit more seriously. Just the thought of someone hacking a amateur site (like this one), and getting my email and password to run through gmail scares me.

I would highly recommend using Google's 2-stage authentication process. Basically you need two forms of authentication to gain access to your account, which means if someone cracks your password, they still aren't in. It's the whole idea of using something you know (like a PIN), and something you have (like an ATM card). Card is worthless if the wallet is stolen, and if someone sees you enter a PIN, it's no use without the card. Google has some programs for smart phones that give you a 6-digit pin you need to enter after you log-in, but you can also do it over text message. For non browser-based services (like an email client on your phone), they can generate a one-time use password for that app. Should hopefully avoid these situations in the future.