Four habits that stop most attacks.
breaches begin with a message someone trusted
A real message survives a second look. A fake one counts on speed.
Urgent, unexpected, asks for a login
Expected, from a known thread
Drag each item into its group, or click an item and then the group.
It takes three minutes and blocks most account takeovers.