For real. Unique, strong password and two factor auth. Your email account is the master key to everything you do online. Protect it accordingly.
However many sites won't allow you to have a different email account just for password recovery, that is insecure, as people would then know where to go for.