Most American internet users have no idea how to protect their accounts