If you can manage it, get them set up with a security key for their Gmail and Fa...

If you can manage it, get them set up with a security key for their Gmail and Facebook accounts. You can do this unilaterally for them if it would be overwhelming.

They won't need to use the keys if they stay on the same device all the time, but it will have a big impact on anyone trying to steal their passwords. Instructions here: https://techsolidarity.org/resources/security_key_gmail.htm.