Rotate your passwords

Many services will allow you to keep the same password for years. That’s dangerous, since data breaches along the way might expose credentials that you use across multiple sites. Create strong passwords using a generator, and update them periodically, every six months or so, to ensure you’re not using anything that’s already been exposed in a breach.