You can't imply that these organizations would need to try and guess your passwords though. They have extensive profiles on everyone, "see" the entire internet traffic and can take the data from that password protected website at will.