Researchers from European cyber security provider F-Secure have said that the trick to avoid email account hacking is to use really long random string for a password.
Speaking about this, the researchers said, The password length should be at least 20 characters, but preferably 32. Humans in general are really bad password generators. No matter how unique you think your password is, its components are still likely to be in some dictionary, and a powerful cracking cluster will come up with the exactly right combination. But there are a few catches for this tip and two of them depend on the security practices of the service one is using.
First, the site or app has to accept long passwords and then the developers behind the software have to use any kind of hashing for the passwords they store. So, you, as a customer, cannot affect what kind of password storage the service providers are using. But you can still frustrate all but the most advanced attacker’s efforts by using long enough random passwords.