Use a long, strong and unique password and enable 2FAConsider switching to a secure and encrypted mail provider using, such as ProtonMail or TutanotaUse email aliasing to protect your real mail address, with a provider such as Anonaddy or SimpleLogin. This allows you to keep your real address private, yet still have all messages land in your primary inboxDisable automatic loading of remote content, as it is often used for detailed tracking but can also be maliciousUsing a custom domain, will mean you will not lose access to your email address if your current provider disappears. If you need to back up messages, use a secure IMAP client Thunderbird