If you have not already, buy a yubikey or 2 asap. Some kind of a physical security key. Buy 2 of em and set them up on all of your email acounts. Apple accounts. Gov accounts.

This mornings headline...
1.3 billion leaked passwords exposed online in massive new collection