Google recommends two factor authentication to reduce this risk. https://www.google.com/landing/2step/

(Proper security is helpful with or without Google....)