Phishing and data breaches are a constant on the internet. The single best defense against both is to use a password manager to generate and automatically fill a unique password for every site. There are free options, and even ones built into your operating system or browser. We can help you choose.
It’s like herding cats sometimes.
I’ve been using KeepassXC + syncthing for years, served me well.