I keep all your apps and OS (computer and phone) up to date and turn on automatic updates; Amazon had OS update requirements for employees where they would shut off your systems if you were running old OS, treat it that way.
I set up 2FA/MFA and prioritize passkeys/biometrics (ie Face ID and fingerprint); second choice is authenticator app; last resort is text confirmation code and at this point, I would consider that not safe enough.
I ask codex or claude code to run a diagnostic on your personal apps and systems including public-facing artifacts (ex: website), all apps in use, api keys, etc. ask it to do research on what is happening in the world with AI attacks right now (and general cyber security practices) + don’t just review your most common apps, review ALL and ask what to do/walk you through it step by step.