This is a few ways on how to prevent hacking on peoples accounts that have been confirmed to work very well.
Automated Text confirmation
What does it do?: Sends a text message to your phone (which is of course optional) if it notices you have logged in from an unrecognized IP, with a radomized code to type into the website, to confirm it is you.
Automated Email Confirmation
Sends you an email with a link to confirm that it is you, after logging in from an unrecognized IP.
Secret Questions
Put in a few secret questions to answer if you are logged in from an unrecognized IP, with an option to answer them every time you log in.
These are just some tips for the devs. to add in more security to the server... Thanks!