A strong password is long, unique, and difficult to guess. Reusing a password across websites means one data breach could put several accounts at risk.
A reputable password manager can create and store a different password for every account. Turn on multi-factor authentication for important services as an extra layer of protection.
Never share verification codes or passwords in response to an unsolicited email or message.