Email is still a favorite method of attack for many bad actors around the web. Make sure not to click any strange links you receive by email, and only send sensitive info via email if you are sure of who is on the other side. It’s not uncommon for bad actors to pretend to be an industry leader or an employee at some important institution just to get sensitive information out of people.
Most security experts agree: passwords are terrible at keeping your account safe. That’s why so many platforms push users to use two-factor authentication, and if you haven’t already, you should enable that option across all your accounts. It immediately makes them safer.