Security mistakes are usually cheaper to prevent than to fix. If you are new to crypto, begin with the basics: a unique password for every exchange account, an authenticator app for two-factor authentication, and an email account that is protected just as carefully as your exchange login. Many losses happen because attackers gain access to the email inbox first and then reset everything else.
Do not rush into self-custody until you understand what recovery phrases, wallet backups and phishing risks mean in practice. Beginners often assume that downloading any wallet app is enough, but the safer approach is to verify the official source, write the recovery phrase offline and never store it in screenshots or cloud notes. If someone asks for your recovery phrase, treat that as a scam immediately.
Finally, separate small everyday balances from larger long-term holdings. Keeping all your funds in one place increases the risk of a single mistake causing a large loss. Start small, test withdrawals before moving bigger amounts and review your security settings regularly.