Just a daily reminder:
a good step to keep your accounts safe: turn on 2FA (2 factor authentication)
2FA requires you to put in an unguessable code when you log into a new computer, therefore if a criminal guesses/steals your password, they still can't log in to your account w/o your phone or keys
It's only a slight inconvenience to you, but a huge one to overcome for the criminals.
If you have a choice, eschew SMS 2FA in favor of app-based authentication, or better yet, a fob.