Suggest to secure my smart contract and token

[smax00580]

My question is i have created a token on with bep 20 binance chain. I have its private key on my laptop where i hold my tokens and private key of my smart contract which is a simple token. I want to know if i had stored my private key on laptop where i use the internet as well i install sometime softwares which downloaded from torrent and i suspect there must be some virus or malware with it. But my token still secured.
What will be best practice to secure them. If i move my all tokens by creating a new wallet and just store its private key off line on paper just. And if someone could access to my simple bep20 private key. Can he do any harm or not. because tokens will be already moved to another wallet?