Use a combination of lower and upper case letters, numbers, and symbols.
If you receive an email from a company asking you to click on a link to log into your account to confirm details, do not click on the link.
If you do have an account with that company and you think the email is not from the hacker, you should still not click on the link. Instead, type the company's web address and log in from there.
Hackers are always finding ways to get through Windows' security features which is why Microsoft is always releasing new updates.
For example, you can make it so that websites do not track your movements.
This protects your computer from any malicious programs getting into your system.
Every computer probably has these installed by now so make sure they are up-to-date. They don't always protect your clipboard though, which may store valuable data such as passwords.