2FA or MFA adds that much needed extra layer of security by requiring you to not only fill in your password but also a code sent to your mobile device or email. Chose an app-based 2FA/MFA solution such as Google Authenticator or Authy instead of SMS (SMS is prone to hacking attempts such as SIM swapping)
2. Use Strong, Unique Passwords
Avoid using easy passwords like your name or birthdate. Instead, create a strong password that combines upper and lower case letters, numbers, and special characters. Additionally, use different passwords for all your accounts as this prevents multi platform breach if one of your accounts is hacked. A password manager can help generate and store complex passwords securely. Try a password manager such as 1Password.
3. Beware of Phishing Attacks (no not fishing attacks)
Phishing attacks are common. Scammers create fake websites or send fake emails that appear to be from an exchange. Always double-check URLs and never click on suspicious links. Ensure the URL begins with "https" and look for the padlock icon next to it in the address bar to show your connection is secure.
4. Use a Hardware Wallet for Long-Term Storage
Remember "NOT YOUR KEYS NOT YOUR CRYPTO". For added security, store your crypto in a hardware wallet rather than keeping it all on an exchange. Hardware wallets keep your private keys offline, making them less susceptible to hacks or being breached. Only keep funds on exchanges if you day trade or need urgent access to them.
5. Keep Your Recovery Phrases Secure
When setting up wallets, you’ll receive a recovery phrase or private key. This is your "holy grail" to access your funds if you lose access to your wallet. Write it down and store it in a secure, offline location. Never share it with anyone, and avoid storing it digitally, as online storage can be hacked!!