Use a strong, unique password for every website. It is recommended that you install and use a password manager.
Having separate passwords for every account helps to thwart cyber criminals. At a minimum, separate your work and personal accounts.
Set your smartphone to lock after a short idle time, and set it to require authentication for unlocking. If at all possible, use something stronger than a four-digit PIN.
Never click links in emails or texts that seem to come from your bank, the IRS, or any other institution. If you think the message might be valid, log into your account directly, without using the supplied link.
More tips to come next week…