I would say most of the times it has to do about your emails ... Like eg if your neopets username is icecream , and your email attached is (you need an account to see links) so it is easy to guess , another possibilities brute force but I am not too sure about this one . I would highly recommend pin everything though ... Even it may not stop the hacker 100% , but at least give them extra hassle when hacking . It's just like install a security camera beside your in front of your house . It technically won't stop burglars but makes them give up on stealing from you because it causes more hassle