Sometimes, we may click the links sent by hackers and type the username and password. The hackers already know your username and password as soon as you type the username and password in the faked sites. To prevent such kind of case, you can use the following methods:
1. Use Your phone to sign in
Even if the hackers know your username and password, they still can't sign in to your account. Every time they sign in, Google will send notification to your phone. As long as you don't allow, they can't sign in.
2. Two Step Verification
Every time the hackers sing in to your account or you sing in to new devices, Google will send you the six digit verification code to your phone. Even if other people know your username and password, they can't log in to your account without knowing the six digit verification code sent to your phone.
How to configure
1. Sign in to your Gmail Account.
2. As shown in the above picture, click the User Account and click Manage your Google Account again.
3. As shown the above picture, click the Security and click again the one you want to configure and follow the instructions.