Hardware wallets are a must, 2FA everything you can but not through SMS.  Use an authenticator.  Also don't save any private keys online