Never reuse a password. Use a password manager to generate complex, unique passwords for every site.
This is the ultimate tool to check if your email was part of a major breach. 5kk gmail.txt
This is the single most important step . Even if hackers have your password, they cannot enter your account. Never reuse a password