Use unique passwords, multi-factor authentication where possible and carefully assess requests for identity documents. Familiarise yourself with a service’s privacy practices before submitting details.