First thing to learn is – dont rely on your password, it can be hacked a number of ways.

Secondly, they can hack your paypal without your password.

I will show you how to avoid both.

Firstly, change your security questions. DONT make them about your real life, or used on any other sites. It’s safest to write them down on paper, and store them at home (not in your wallet), or with a parent/friend. It’s safer on paper, as you can make it nonsensical and therefore more complex. And paper can’t be hacked from thailand.

Secondly,change over using a security key as well as password.

You can a few choices :

– buy a key ring, or key card from paypal

– use SMS

– use a mobile app

The idea is, everytime you use your password, you have to also use your mobile phone. So hacking the password is useless without also stealing your phone – also very difficult from thailand, Either the mobile app or SMS you can do right now, for free.

I use the last 2, as its difficult to use the mobile app for more than 1 accounts.

Here is the app I use, I am sure there is similar for android.
https://itunes.apple.com/au/app/vip-access/id307658513?mt=8

Here is the paypal link to enable any of the 3 methods above. Paypal sort of  lump them together.
https://www.paypal.com/securitykey

click ‘activate now’ big yellow button, click ‘get security key’. Then there is the 3 options I listed above. The last one is the mobile app (install the app first).