This might sound stupid and generic, but don't get phished or keylogged. Pay attention to the sites you are visiting and only download and install the most basic software that you need from the official sources. Don't click on unknown links, don't open emails and attachments from people you don't know, don't torrent, watch porn, and play with patches and cracks and illegal software on a PC you use for your financials. Doesn't matter if it's crypto or fiat-related. Verify and double-check everything you can.   

Why do you think using the TOR version is safer? Couldn't that be a great honeypot as well? Someone creates a TOR-only blockchain explorer that logs addresses. Your IP is protected, that's true. Unless the TOR server you are connected to is also malicious.