Install 2FA on everything you can. Forbid password reset in mail, and on all accounts (Google, Proton, X, etc.). Always hide mail under an alias;

Generate phrases and keys in core client or node. Then import them into hot wallets. Beware of vanity-based attacks;

Set up an address book in the wallet — and enter (whitelist) your addresses. At the same time, don’t forget to check and verify them in the settings sometimes;

If you have to deal with a potentially infected PDF file — ask to download it in preview mode in advance (Google drive) or use anyrun_app or dangerzone.rocks. Alternatively, work with VM/Sandbox. You can use VM from VMWare and sandbox from Sandboxie;

You can protect yourself from hacking on a logical level as well. Just put a burner bot (github.com/codywall/Burner-Bot) at all of your wallets and securely protect it: or put your own Sweeper bot;

Never click on links just for fun. Never at all. If necessary, use anyrun_app or urlscanio (or simply type in the link by hand and open it in incognito under a virtual machine);

Put a canarytokens-based honeypot on your work computer. Make an HTML file, name it “seed phrase” and put a tracking pixel in there with canarytokens (or iplogger(dot)org). Put open notifications on your phone/bot. I will provide all data on request;

Install a “littlesnitch” application on your computer/router (under OpenVRT) and configure it correctly;

Always update your browser. It is best to use the original Firefox or Chrome. But you can use the solution similar to detect(dot)expert ;

Never work when you are sleepy, hungry or sick. If you feel vulnerable or just uneasy — the chance of being hacked increases dramatically. Always double-check the addresses pasted after copying to the clipboard (watch out for the crypto clipper malware).