Don't send your password via email, text or instant
message on an unsecure connection.
Don't reuse a password. Use a unique password for
every account. Hackers will use a "Credential stuffing attack" in an
attempt to take over as many of your banking, social media, streaming
and other accounts.