– Enable 2FA everywhere it's offered. This single step blocks 99.9% of automated account takeover attempts.
If you want, I can: