Don’t give out a password on a phone call

Never supply your current or old passwords to someone on the phone claiming to be from tech support. If you need to reset your password, you can usually do so by clicking a link on the site in question and/or supplying your old password.