I change passwords and I put a signature ID on subject lines. Anyone receiving an email purportedly from me that does not have that signature knows not to open it.
That is an excellent suggestion.