What kind of hacker are you talking about?
Random troll with some IT abilities trying to cause some nuisance? Yeah can’t do much except for signing you up to unwanted newsletters.
Criminal hacker that wants your money? Expect fishing links specifically catered to you. Like, they can use it to find out wich bank you are with and then send you a mail that looks like from your bank but redirects you to a fake site to steal your online banking password. Also expect that they’ll try common passwords, and those wich got leaked from databases in the past (rainbow table).
Government agency targeting you because of political activism or because they suspect you did a crime? Yeah your IP/Email is enough to basically uncover your entire non-encrypted online activities.
If you reuse the same password across multiple websites, and one of those passwords has been compromised, they could access your email.
A way to get around this is use a different password for every website, and use Two Factor Authentication (2FA) whenever possible. If your email provider doesn’t provide 2FA for a unique login, change email providers.
To check where your email has been compromised before, use this website https://haveibeenpwned.com/
ELI5; Use 2FA and use unique passwords
Latest Answers