Building passwords that hold, keeping them somewhere safe, and turning on a second step for the accounts that matter.