When it comes to protecting login passwords from phishing emails, it is said that U2F hardware tokens are the best (yubikey etc) but it might not be the easiest

When it comes to protecting login passwords from phishing emails, it is said that U2F hardware tokens are the best (yubikey etc) but it might not be the easiest solution for non-techies. Good advice is to never click links in emails, but go manually to a given page (via Google perhaps) and log in yourself. It's a bit easier if your family lives outside of English-speaking country when it comes to phishing. Phishing spam is either English, or a poor google translate 95% of the time.