The single most effective step is moving your savings to a hardware wallet. It keeps your keys offline and out of reach of remote attackers.
Use a password manager, enable two-factor authentication with an authenticator app, and secure the email account linked to your crypto services.
Never click links in unsolicited messages, always check URLs, and never enter your recovery phrase into any website or app.
Keep your operating system and antivirus up to date, avoid cracked software, and be careful about browser extensions that ask for wallet access.
Keep only what you need in hot wallets, revoke unused token approvals, and do not advertise your holdings online.
Hackers rarely use brute force. They use phishing and trickery. Good habits beat technical attacks most of the time.