Make a unique password for every online account you have. Do not duplicate. Change passwords often, twice a year at least. Don’t use numbers or dates that could be associated with you. No birthdays or anniversaries. Give all your passwords at least 8 characters, mixing letters, numbers, and special characters. A password manager is a good option. Several are available for small businesses.
***