Use strong, unique passwords for each account (long phrases work best).

Enable two-factor authentication (2FA) wherever possible.

Consider a password manager instead of reusing passwords.

Don’t click suspicious links or download unexpected attachments.

Verify emails or messages asking for personal info—even if they look official.

Watch for phishing