Start with email, since it often controls password resets for other accounts.
Use unique credentials
Use a password manager to create a different password for each account or choose a passkey where supported.
Turn on another sign-in check
Enable multi-factor authentication and store recovery codes somewhere private and accessible.