Some may not know, but Google supports 2FA (2-Factor Authentication), and this basically means you need two items of information to log into your Google Account. Paypal also has this option.

I only found out about this through LastPass when I was cleaning up some old (and no longer used) accounts. This is worth a look and maybe switching on. But, as with most forms of authentication, you need to balance the convenience and risk (See related articles)

2-step verification - Accounts Help.

Related articles

• Google 2-step login verification flaw allows account hijacking (net-security.org)
• How We Extended Google 2FA to Every SaaS App (meldium.com)
• Bypassing Google's Two-Factor Authentication (duosecurity.com)
• Google squishes login-bypass bug perfect for account hijackers (go.theregister.com)