Online safety is mostly routine. Use a different password for email, banking, and social accounts. Turn on two-step verification anywhere it is offered, especially for email, because that inbox can reset every other password.
Pause before you tap a link in a message. Check the sender and the site address. Banks and phone companies do not ask you to send a password or a one-time code. If a text says your account will close today, open the app yourself instead of using the link.
Update the phone and the computer when a security update appears. Old software is how many break-ins start. Remove apps you no longer use. Lock the screen with a PIN or fingerprint, and set the phone to lock itself after a minute.
None of this requires expert knowledge. A password manager, two-step verification, and a habit of slowing down on urgent messages cover most everyday risk.
Photo from Pexels.