1. backup 2. encrypt disk 3. 2fa everywhere 2. anticipate to lose your computer at any time.