Customizing your password towards the site also helps. Your xfinity password could contain the word “comcast” in it somewhere. That keeps you from re-using passwords. Hackers tend to strong-arm passwords rather than take and educated guess at them.
And I change them all on a regular basis.
That still is not enough, as a keylogger infiltration into a system will eventually reveal all passcodes to the sponsor. I sweep my systems regularly to check for such things.
And I check transactions on all critical applications every few days.
Paranoid much? Well, yes. It goes with the job and the times in which we live.