The safest bet would be to get a hardware wallet such as a Trezor or Nano Ledger S - both support ERC20 tokens. If you take this route, make sure that you buy it directly from authorized resellers. Alternatively, you could use MyEtherWallet.com (MEW) or MyCrypto.com in conjunction with MetaMask. However, be aware of the risks involved. E.g. Some of MEW's DNS servers were recently hacked, etc.