With a lot of non tecky friends and relatives interested in crypto, I fell like
a lot of people need at least these security measures.
- Step 1, get a password manager
- Step 2, setup 2 factor authentication
- Step 3, backups
Password Manager
Start by picking any password manager, 1Password, LastPass or BitWarden are good choices. Setup a NEW, NEVER BEFORE USED, password as the master password and start filling your data base. I advise taking some time off to change ALL the passwords you can remember with the built-in password generators. I use bitwarden.
2FA
Use Authy. You’ll thank me when your phone screen breaks and you don't lose access to everything for a week or for ever in worst case scenario. Every time you see somewhere talking about google authenticator you can also use Authy, its the same algorithm, it works off-line, and you can setup a master password so it backups an encrypted version of your keys to their cloud, which you should do.
This master password should be different from the bitwarden master password, and bitwarden should also have 2FA enabled. WARNING, this creates an enclave that makes it so that you can only setup a new device if you have access to both Authy and Bitwarden in some other device.
Backups
Install the Authy APP on all your devices, tablets phones and computers, you can setup pins for every device without touch sensor so that only you can access them(also store those in bitwarden). Ideally your phone has a fingerprint scanner so you can leave your main device pinless for ease of use.
Also install the bitwarden app on all your devices.
Also recommended to periodically backup your passwords to some offline encrypted location, just to be safe.
That's the gist, here is a better more complete article.