How do you handle suspicious emails or messages in your inbox?
For these types of messages, I choose not to interact with them and ignore or delete them. I also have special email for eshops and unimportant web pages, so the possible spam is coming there and not to my main email.
How often do you update your passwords for online accounts?
It depends on the importance of a given service. For important things I try to change my password at least once every 6 months. For unimportant things, where there is no risk of an attacker getting important information about my other accounts, I set a strong password and don’t change it much.