If it's inherently private data, use first person. For shared/public stuff, use second person. 'Your passwords' sounds too much like someone else is talking about my confidential data.