Consider two step authentication (instead of just username and password to sign in).