Why passwords still matter
Most account takeovers start with a reused or guessed password. Small changes in habit remove the easiest routes in.
Use a password manager
A password manager generates and stores a unique password for every site, so one leak doesn’t expose everything.
Turn on two-factor authentication
A second factor, such as an authenticator app, stops most attacks that rely on a stolen password alone.
Recognise phishing
Check the sender, the link destination and the urgency of the request. When in doubt, go to the site directly rather than clicking.