Online security for non techies - any advice?

[DidIMissSomething]

The current MN data beach has got me thinking - I really need to update my approach to online security and wondered if any of you on this board could give us less enlightened users an idiot's guide?
I realise I can find this out by googling but thought a discussion here would be really useful to the uninitiated. Perhaps we can make a positive out of a shitty situation! Would love to hear thoughts

Make sure you have up to date antivirus on your PC.

Use secure passwords with a different password for every site. Use a product like KeePass (which is free and is what I use) or online service like LastPass to manage your passwords. That way you don't have to remember individual passwords, just one master password that gets you into all your other passwords.

If a site offers two-factor authentication, use it. This typically means installing an app on your phone which gives you a code to enter as well as your username and password. If you have two-factor enabled, someone who manages to get your username and password still won't be able to get in as they won't have access to your phone.

Be VERY careful when clicking on links in emails, particularly ones claiming to come from your bank, email provider, etc.

The above won't fully protect you against things like the technical issue Mumsnet encountered but they will ensure that the effect of any breach is limited.

Also, be careful when visiting sites that are not HTTPS secured, particularly websites when you need to authenticate yourself or provide personal information.

www.theverge.com/2018/2/8/16991254/chrome-not-secure-marked-http-encryption-ssl

Sites that are not HTTPS secured basically transfer your information openly in clear text, so any snoopers in your network can see any content you have provided.

Use the most updated Mozilla or Chrome browsers - they give good warning if you are about to access or are accidentally redirected to a non-secure site.