- Update Windows and associated programs always
- Leave Windows Defender alone (no hassle anymore)
- Set UAC to lowest level (Too annoying to leave on high)
- Use Firefox and always update
- Use Umatrix and Ublock Origin
- Use Bitlocker and Truecrypt/Veracrypt for especially sensitive stuff
- Use Keepass for passwords - Never run any file you don't know what is outside of a VM