Turn on two-step login
Two-step login (also called two-factor or multifactor) asks for a code or a tap on your phone as well as your password, so a stolen password is not enough.
The pictures are drawings of the screens, not screenshots. Your screen may look a little different.
Drawing Step 1: Start with your email and your bank
CISA suggests email accounts, banks, health care and other important accounts first, then every account that offers it.
Drawing Step 2: On an iPhone (Apple Account)
Open Settings, tap your name, tap Sign-In & Security, then Two-Factor Authentication. Enter a trusted phone number and the code you receive.
Drawing Step 3: For a Google account (Android, Gmail)
Open your Google Account, tap Security & sign-in, and under "How you sign in to Google" choose Turn on 2-Step Verification. Follow the steps.
Drawing Step 4: Never share a code
Codes are for you to type, never to read out. Google says it will not call you to verify a code. Anyone who asks for one is a scammer.
Good to know: Other accounts: look in their settings for "two-factor", "two-step" or "multifactor" and turn it on.
Official help
These steps follow the official help pages: