1: Enable Two-Factor Authentication (2FA)on all platforms where you store valuable assets or personal information.
I'm just wondering, don't all exchanges require users to have 2FA? Without 2FA, an account is like an open cookie jar for hackers. But since it was mentioned in the OP, I'm curious. Most exchanges I use force me to enable 2FA, and sometimes I even get an email confirmation when I transfer coins.