QFT.
Also:
4. DO NOT REUSE PASSWORDS!
If an attacker gets mickey@disney.com, password abc123, from a hack of roll20.net then they will try that same username and password on Ebay, PayPal, Yahoo, MSN, .......
5. Do not store any of your credit card details online.
It's a hassle having to type...