It doesn't matter how strong or long your password is if you've got a keylogger or reuse the same password or enter it into a phishing site. If you can I'd set up 2-factor on your email address. 2-factor will be coming for this site with the new forum early next year so hopefully that will cut down most of these hacked accounts.