Google has a very nice security feature everyone should be using.  It’s called 2-step verification.  It’s relatively simple to setup, and there is a little bit of administrative overhead, but you should do it just the same.    These instructions are for Google Apps, but they should work for everyone.