That $89 password manager subscription paid off when my email got hit
Got phished last month, some scammer got into my email through a fake login page. They tried resetting my bank passwords. But I had been paying $89 a year for a password manager with 2FA built in. Every account had a different random password, so they only got the one email login. Bank and everything else stayed locked. Took me 30 minutes to change that one password and kick the session. Cost me less than a nice dinner for the peace of mind. Anyone else had a close call that made the subscription feel worth it?
Set up 2FA on your email and any account that lets you add it, since that's the one thing that stops most of these attacks cold. And make a habit of checking your active sessions on anything important, that's how I caught a login I didn't recognize before they could do damage.