How do you prevent session hijacking?
Recently my friend got hacked and lost most of social media accounts as somebody posted altcoin scams on his profile. He has 2FA enabled and uses password manager religiously, so he was confused how that even happened. What are some things I should implement to make sure this doesn't happen to me?