Limit login attempts per IP address, username, and session token using leaky-bucket algorithms. (Prevents large-scale automated dictionary attacks) Credential Exposure Monitoring
Use a unique, strong password for every single online account. If a hacker gets your password for a minor forum from a Patched.to combolist, they won't be able to use it to log into your email or bank. Patched.to Combolist