In late May, a massive data and password leak confirmed that 184 million accounts were exposed, Google users included. If you didn’t immediately change your password then, now’s the time to do it. According to Forbes, research by Cybernews indicates that the May breach exposed an astonishing 16 billion usernames and passwords. And Daily Mail reports that some people are receiving word directly from Google to turn on Gmail two-factor authentication—or lose account access.

The thing is, experts agree that passwords aren’t really that secure. Kotsovinos and Google think you should opt for passkeys instead, which use biometrics or a pin, and are resistant to phishing and other attacks. While changing your Google password is the absolute bare minimum action to keep your account safer, maybe now’s the time to explore password-less ways to secure your Google and other accounts.