You should always protect your passwords. Most people know that, but do you know that you should have a complex password?
I was reminded of this when a client of mine was hacked. I'm not sure how it happened, but someone accessed his account, changed the password, and began sending emails requesting money.
Your password should have a number, an upper case letter, and be at least 8 characters. You should also include a special character, if the account holder will let you.
Also, you shouldn't choose words that are easy to guess, such as common words or the names of your children. As a final thought, change your password routinely, maybe once or twice a year.