Try to prefer surfing the web in https:// mode..

Do not visit shady websites, particularly those about which browser gives you a warning..

Never enable 'Autofill' or 'Save Password' in Settings..

Keep your anti-virus updated, fully-functional and run a full-device scan regularly..

Prefer to browse some websites in place of their smartphone applications, as apps inevitably have to be granted certain "permissions" that seem intrusive..

On public computers, do not access sensitive info, and always clear browser-history before leaving the terminal, erase any downloads (just in case) if you get printout(s)..

Do not forward articles/posts containing controversial/sensitive information..

Try to get rid of bloatware, or the pre-installed apps that you don't use, or disable them in settings..

Grant the Location/Access Clip-board/Send Notifications/Camera permissions very carefully, mindfully..

Always use an updated browser or its latest version..

Try to stay away from spam (Email or otherwise) by applying proper settings..

Browse and trust only reliable sources of information, and do not trust "Wikipedia" and the like for formal information sharing, as they can be edit by all and sundry..

Do not use apps which include spell-check, auto-correct, or that claim to correct Grammatical mistakes.. Trust your knowledge-base, and most importantly, double-check on Google in case of confusion or doubt, before using or placing any piece of information in the cyber-space..

Always choose to go to official websites/handles of organizations/products/services/government only, in Google Search/on You Tube, or simply use "I'm feeling lucky..", when not sure about the official web address of a particular entity with presence in cyber-space..

Try to stay away from pop-up windows, close disturbing tabs instead of perusing them or wasting time on what could possibly harm your device by installing spyware or carrying out phishing activities..