Advice: Setup 2FA, backup codes, and any other means of authentication available for your accounts. Even if you have absolute confidence in the security of your password, it alone may not be enough to protect you from the service's support team getting socially engineered.