I would also add another tip: create a separate email to use for financial accounts.
Don't use this email for anything else.
Don't use this email for anything else.
(Shops are regularly hacked with leak of email addresses and possibly compromising passwords.)
I use separate addresses for banks, brokerage, etc. Because the email address associated with each isn't used elsewhere, I can almost always identify the culprit when it starts getting spammed, so I can cease business with and blacklist anyone who does it[1].
Because of that, any phishing attempts that go to the wrong address, even well done, tricky ones, are so obvious a machine can trash them with certainty.
Yet another reason is that if someone is going to try to guess/steal your password, if they don't know the email address used for that account, that's something else that can slow them down/trip them up.
[1] That is how Wells Fargo lost my business, well before they made a surprisingly strong go at proving Lenin right about capitalists.
If you use the same email, once that one is compromised, than all accounts related to it could be in jeopardy.
By having a separate account just for financial purposes, which isn't used for regular emails with anyone, it just decreases the chances of it being leaked.