change your databse password
change you admin login password
change your server password
user the generator password and keep it in same please.
http://strongpasswordgenerator.com/
check your system for some robot aplication install. may be they install robot to your system thats why all your personal password has recorded.
don't use keyloger to your system.. or try to setup your data base for your personal PC or another PC, if you dont have extra pc, reformat your PC and install your databse again to sure that no tpboot on your system. so that no body know what you are doing to your site