1. If it’s too good to be true, it likely is
Don’t fall for any silly random give aways from people or projects you do not trust; the reality however, is don’t trust anyone.
2. Private Key/Seed Phrase
Don’t ever share this with anyone, not even your mommy, and store this information offline like a cold wallet, or even on paper in a safe.
Always enable multi factor authentication whenever possible on whatever wallet or exchange. This is not a sure-fire solution, but it prevents about 99% typical identity hacks.
4. Domain Verification
Triple-check website URLs! Phishing scams will often create almost an identical URL as legitimate websites, but have made very benign change in a letter or number.