If you reuse the same password across multiple websites, and one of those passwords has been compromised, they could access your email.
A way to get around this is use a different password for every website, and use Two Factor Authentication (2FA) whenever possible. If your email provider doesn’t provide 2FA for a unique login, change email providers.
To check where your email has been compromised before, use this website https://haveibeenpwned.com/
ELI5; Use 2FA and use unique passwords
Latest Answers