Along with above hardware wallet, I think using vmware or virtualbox is a good way.
In a virtual window with a wallet installed, If you do nothing but drive your wallet, I don't think you can be hacked.