Thanks for the guide! It looks good

I would also add in the password section that one shouldn't use the same password for multiple websites.

This is the main issue with many of the account hacks (along side phishing of course), there are a lot of people requesting others to sign-up on their new website (bounty campaign, new coin etc) and people make the mistake to use their bitcointalk credentials or use the same password.

It is extremely easy to setup a site that only collects that information and people may unknowingly give away their credentials for a couple bucks.