Any websites and apps must secure password.
It is best use Password Manager web and apps find there on tech news.
Never share anyone with username and password.
Use auto generate password to strong password uppercase, lowercase, symbol, and number must at least 8 length or more.
Do not use for password birthday, name, place, word, products, and dictionary.
If someone was hack your account, check device login logs, IP location, and deice information. Change password. Copy IP address and paste lookup IP address where was location.
If someone was hack your account again, Turn on 2-Step Verification. Use security key easy authenticator.