Hi, will share my experience. Few years ago got my lessons :D Got robbed 1.5BTC
1.Wisely choose email provider, i suggest (protonmail.com)
2.2FA auth on email
3.2FA every in exchage you are registered
4.PC only for cryptodeals, no movies, no FB, nothing else but cryptodeals.
5.No wallets on phone
6.No vital information on phone
7.Hardware wallet
Maybe something useful for you :)