Keep long-term holdings on a hardware wallet so your keys stay offline and out of reach of malware.
Write it on paper or metal and store it securely. Never store it digitally or share it with anyone.
Use an authenticator app, not SMS, for your exchange and email accounts to reduce the risk of account takeover.
Always double-check the full address before sending, and beware of clipboard malware that swaps addresses.
Update your wallet app and device firmware to receive the latest security patches.
Use a password manager and a unique password for every service. Reused passwords are a common entry point.
Ignore unsolicited messages offering help or free tokens. They are almost always scams.
Periodically revoke token approvals for dApps you no longer use to limit exposure to smart-contract exploits.
Keep spending money in a hot wallet and savings in cold storage. Never keep everything in one place.
Do not broadcast your holdings publicly. The less attention your wallet attracts, the safer it is.