Only access the portal via bookmarks or verified internal links. Never click a link for "MyPasswordFoundEver" sent in an unsolicited email or text message.
: Multi-factor authentication adds a layer of safety even if someone "finds" your password. mypasswordfoundever