I’ve done some research on this subject lately and here is what I’ve learned. Note: I’m not a Techie and this isn’t professional advice.
-Use a strong password or pass code to access your devices and set it to lock automatically after a short period of inactivity.
-Use a device with the latest software, such as the latest version of Windows, iOS, etc. Set it to update automatically.
-Use up-to-date virus protection. Set your subscription to auto-renewal.
-Use a different password for every sensitive online account you have. Change passwords at least every 6-months. Don’t re-use old passwords or create new ones that are too similar to old passwords. Don’t use passwords that are easy to guess, such as using personal information about yourself. Use a mixture of upper case and lower case letters, numbers and symbols. Longer passwords are better than shorter ones. Using uncommon words and removing some letters from words is also a good idea.
-Use two-factor authentication. Sometimes that means being prompted for a personal question you’ve filled out previously, such as the name of your first pet. Other times it means receiving a text message containing a security code. The latter is often recommended, but it does leave you vulnerable to SIM Swapping, but that is extremely rare.
-Don’t use public Wi-Fi for things like banking, sensitive email accounts, etc. Use your own password protected internet connection. For your Wi-Fi, use the same strong password principles you would for a sensitive online account and change it periodically.
-Use different email addresses for different purposes and avoid sharing information between those accounts. That way, if one gets breached, the damage will be limited to whatever info is available to hackers in that particular account. Some tech articles recommend having at least 4 email accounts: one for personal communication with friends and family, one for work and business purposes, one for correspondence with financial institutions, and one for accessing random websites, newsletters subscriptions, gaming sites, dating sites, etc.
-Don’t click on links in your email from people you don’t know. If you hover over the link with your cursor, without clicking, you’ll see the link’s web address. If the address seems weird, don’t click on it, even it’s from someone you know or an institution you know. If it doesn’t have an s at the end of https, definitely don’t click.
-Use a different browser for different purposes, similar to using different email accounts for different purposes. Don’t allow browsers to save passwords or payment information. Make sure your browser is set to update automatically. Set your browsers to tell you when you’re about to entire an unsecured website. Always close browsers after signing out of your online accounts. Clean cookies and history as well.
-Set your important online accounts to notify you if there is any activity, such as password changes, money withdrawn, etc.