Password Cleanup
Find weak ones. Replace breached ones.
iCloud Keychain audit
Settings → Passwords → Security Recommendations. Lists weak/leaked passwords.
Google Password Checkup
passwords.google.com → Password Checkup. Same audit for Chrome.
Have I Been Pwned
haveibeenpwned.com (free). See if your email was in breaches.
Update breached passwords
Especially banks, email, social media. Use a password manager.
Different password each site
If one is breached, others stay safe. Manager remembers them all.
Two-factor everything
Especially banks and email. Even breached passwords are useless.
Quick Tip: 1 hour password audit yearly. Prevents 99% of identity theft.