 Number one, set up two-factor authentication. This means that you need a separate code to log in once you log in with your password. So let's say you fell for one of those notifications. You logged in with your password. They got it. They immediately try to hijack your account. They wouldn't be able to because there would be a secondary code that is texted to your phone, and that would make it so that they wouldn't be able to get in.