Apparently it's Safer Internet Day.
So, here's my list for the average user:
1. Use a #PasswordManager
2. Use an ad-blocker whenever possible. (lots of malware comes from ads)
3. Turn on 2 Factor Authentication (a.k.a. 2FA, MFA) whenever possible.
4. If you see something outrageous, really think about that link, the source, the probable outcome and if you really need to expose your computer or mental health to that.
5. Backup your devices to non-connected media.
All of these are great ideas.
If you want help in doing any of these just ask.
Many of us have experience in helping others to implement these.
If I had to pick an order to do them in.
1. Backup
2. Password Manager
3. Ad block
4. 2 factor authentication