Password manager
A tool that generates and stores a unique, strong password for every account, so people never have to reuse one.
For small firms
Rolling this out firm-wide is one of the cheapest risk reductions available — most credential-stuffing and reuse attacks stop working entirely.