How do you handle suspicious emails or messages in your inbox?
I analyze the header of the email. check spf, dkim, dmarc. Also use virustotal.com for URL, ip, domain, file hash scanning.
How often do you update your passwords for online accounts?
I do not update passwords regularly. If needed, when i know was a breach and data was leaked, so i change. Create complex and long password, minimum 20 symbols and save it in my password vault.