Even if you have replaced it with a newer password, old credentials can remain surprisingly valuable in the wrong hands.