The single most important tool to prevent that sort of compromise is multi-factor authentication ... by an authenticator app on a smartphone. The new changes also affect Office 365 desktop ...