I remember the days when passwords lasted more then the nanosecond it takes for the database to return a stolen password flag and kill the account.
ultrapasswords is blown but still around.
I think most everything now (this is any kind of password that is a paid service, not just porn) logs IPs and if unusual ones show up they shut down the password...