All accounts must use a password manager and unique credentials per service. Multi-factor authentication is mandatory for any system that supports it, including email and source control.