Never click a link in your email that asks you to reset your password, no matter how legit it looks #tip