Regarding additional security, change upon Two-Factor Authentication (2FA) first. –