Internet users are 'seriously naïve' when it comes to setting passwords.