Ever gotten an email from someone claiming to have your password? What should you do? Ignore them. I’ll explain.
Check out http://www.haveibeenpwned.com to see if your email address has been part of any breaches.
Get yourself a password manager. Here’s some good ones. I’m a big fan of Dashlane.
https://www.password-pros.com/?gclid=Cj0KCQjw-_j1BRDkARIsAJcfmTG1UhMR4AN5P8ydRinRFXuEdqTq84YnR9gNwO0NsmS8645iluI4aCIaAhLmEALw_wcB