A password alone is not sufficient to protect sensitive data.
Your password can be compromised in the following ways:
It helps to have a good password manager. This also saves you from having to remember a lot poor passwords. Seriously, free yourself up and start using a password manager now! However, one of the most reliable ways is to have two ways in which to authenticate/log in. First your password is needed and then a second step asks for more authentication.
You might actually know these steps from interacting with your bank online, or with the government through digid or something. It is possible to have the second factor be a text message with a code that is send to you. Luckily there is a really good smartphone app available as well: “Free OTP Authentication”
Using 2FA will mean that even if your password is compromised your account and data remains safe.
If you have the time follow this online course (you can create an account for free). It is seriously good, with fun stuff in between and you will learn all about password managers and 2FA. I can not recommend it enough.