[VoodooJuJu]

>Have random, unique passwords. Use a password manager. Done.

Still vulnerable to phishing, and that's where Yubikey & U2F can help.