Use a physical security key or an authenticator app (like Google Authenticator) for your Gmail. This makes a stolen password useless on its own.
Enter your email to see if it appears in known public breaches. Use a physical security key or an authenticator
If you are concerned your data might be in a list like this, take these steps immediately: take these steps immediately: