Millions of people across the UK could be using just one password across all their accounts – and that’s a huge problem