Your email is the master key to everything else
Most other accounts use your email for password resets, so if someone breaks into your inbox they can often take over your banking, shopping, and social accounts too. That is why your email password deserves stronger protection and more frequent updates than any other login you own.
Pair it with two-factor authentication
A strong password alone is not enough anymore. Turning on two-factor authentication, an app code or security key in addition to your password, means that even if your password leaks, an attacker still cannot get in without your phone or key. Most major providers let you enable it from the same security settings page.
Frequently Asked Questions
What happens to devices I am already logged into when I change my password?
Most services automatically sign out other devices for security, so you will need to log back in everywhere using your new password.
What makes a password actually strong?
Combine uppercase and lowercase letters, numbers, and symbols, aim for at least 12 characters, and never reuse a password from another site.