Apparently it's Safer Internet Day.
So, here's my list for the average user:
1. Use a #PasswordManager
2. Use an ad-blocker whenever possible. (lots of malware comes from ads)
3. Turn on 2 Factor Authentication (a.k.a. 2FA, MFA) whenever possible.
4. If you see something outrageous, really think about that link, the source, the probable outcome and if you really need to expose your computer or mental health to that.
5. Backup your devices to non-connected media.
I would add
6. Get a fireproof*, waterproof safe or lockbox to keep your nonconnected backup device in when you're not actively using it.
*Nothing's really fireproof, but something that's rated to delay the destruction of its contents in a house fire for two hours is good.
@0x56
Thanks. When I figured out a small two hour rated lockbox wasn't all that expensive I went ahead and got one.
Then I discovered an unexpected side benefit: now I always know *where* my backup disk is. The box is too heavy to move around casually.