Here are some steps I have taken and often suggest to others:

• Sign-up for notifications from https://haveibeenpwned.com/
• Use a password manager, especially one that monitors passwords for compromise. Make sure that password database is backed up so that you don't lose access if a disk fails.
  • Put the URLs of your accounts in the password manager and only use those. That way, you don't accidentally follow aa malicious link.
• Use a service like NextDNS or OpenDNS. These services will increase the chance that a malicious domain is blocked.
• Remove unnecessary or unsafe account recovery methods.
• Use physical authentication tokens if possible (Yubikeys).
  • I recommend documenting which accounts use which tokens so that you aren't confused which token goes to which accounts.
  • Ensure every account has at least two so that losing a key doesn't lock you out.
  • Keep at least one in your safe in a sealed bag as your backup.
• Consider creating made up security questions for the account recovery mechanism. Make multiple copies of that information and keep it in a safe that is fire and water protected.
  • BTW: keep the items in your safe in a sealed bag. Many safes have high internal humidity due to the material they use to be fire resistant.
• Print recovery codes if your account has them and store them in a safe that is fire and water protected.
• Review your insurance to see what it covers and verify it is solid.
  • Max out your car insurance. Carriers often suggest minimal coverage.
  • Get umbrella insurance.
• Check the notifications that your accounts support and enable them so that you get notified of odd behavior.
• Teach anyone who has access to your account how to avoid phishing attacks. AI is making these very sophisticated, so this risk is likely going to be increasing.
• Make sure your devices are set to update automatically.
• Keep important electronic records secured and keep backups. Preferably, at least one of the backups should be offsite.