-
Use passphrases (10 characters or more is probably safe from getting cracked on a rainbow table, 15 characters or more would start to get difficult for even state actors)
-
use random passwords with a password manager
-
don't reuse passwords
-
Use 2fa (esp for secure accounts like banking, or anything you use single sign on for.)
-
you can check any accounts that have appeared on lists on haveibeenpwned.com, or I think the tor version will even show you what password got leaked last time I checked. last time I checked It was a 15 year old password but at least you know to never use that password again ever.)
Have a nice day
5.