Do not open any attachments in emails unless you are expecting it or trust the sender. Even then, always be skeptical.
Don’t click on any links in emails unless you are expecting it or trust the sender. Even then, always be skeptical.
Don’t visit any websites you are unsure about.
Passwords
Make sure your passwords are always unique, you shouldn’t use the same passwords for multiple things. Make sure to have strong passwords with numbers, symbols, etc.
Use two factor authentication whenever possible.
Don’t keep the same passwords for years, it’s good to change them up fairly regularly.
Always use 1password.com to save passwords and enter website credentials.
Be aware of social engineering, do not give out passwords to people calling you. If it’s a reputable company, hang up and call the number shown on the company’s website.