Passwords and multi-factor sign-in

Use a long, unique password for every account. A password manager makes this practical.

Turn on multi-factor authentication wherever it is offered. Even if a password is stolen, the second factor stops most account takeovers.

Never approve a sign-in prompt you did not start.