Use a unique password, enable multi-factor authentication where available, and avoid sharing one administrator account across a team. Give each person only the access needed.
Remove access promptly when it is no longer needed. Keep recovery email addresses current and store recovery information securely.
