If you remember only five things from this guide, remember these.
- A different password for every account.
- Use a password manager.
- Turn on two-factor authentication (2FA) wherever possible.
- Give special protection to your email address and your Apple account.
- Never give out a password or a login code received by SMS or generated by an app.
Why?
Because if you use the same password everywhere and a single site is breached, an attacker can try that same password on Instagram, Amazon, your mailbox, and so on.
Cybermalveillance.gouv.fr explicitly recommends a different password for each service, a password manager, and two-factor authentication.