Under Account → Security you can enable two-factor authentication (an authenticator app, with SMS as a backup), review the devices signed into your account, and sign out everywhere if you suspect a problem. We'll also email you when we see a sign-in from a new device or location.