I always recommend 2-factor authentication for your Google account, especially with security key (see: http://goo.gl/3t2gGF
). If you can't use a security key, installing the Password Alert Chrome extension will provide a great deal of protection against phishing attacks. I highly recommend installing it! Even if you are a security key user, this extension is an easy way to add a lot of extra protection to your account, and there are no added steps to the login process.