Don't use your bitcointalk account password on other websites

[OcTradism]

And when we watch other people's mistakes

It is best when we do research and learn from advice, lessons of others. It's not good to lose money just to get lesson which we learn from.

It is terrible if we only have lesson to learn after losing all of our capital. If we fall into such cases, it is only because we are close-minded and don't listen to advice of others and think we are smarter than them then we will be safe without learning their advice.

Your advice in this topic can be expanded to as Never use a same password on multiple platforms, multiple exchanges or multiple wallets.

[TheNineClub]

In this day and age, a new different password and username should be created for any new website signup. And I am not talking about changing the last two digits on a number, I mean it has to be something completely different. That's how I go about it and honestly, I sometimes think that even that is not enough. With how many sign-ins I am required, I wouldn't be surprised if I duplicated my info eventually XD

[Findingnemo]

Some simple steps can save us from lot of phishing like

Your numbers 1–5 as enumerated in your post are apt. Though I think item 4 will be a lot more difficult to avoid since a lot of sites will need app downloads from Google playstore or apple. However, the catch there is to make sure one is certain that the site in question has an app to be downloaded before heading to a third party for it. As for those using simple passwords, it's advisable not to. I guess a lot of people use simple password so they can easily recall it off by heart instead of writing it down on paper. That's not good to want to remember it that way. We should know that the mind is sometimes subject to forgetfulness. Write out the passwords, and since one is writing it out it will be nice to make it a strong and difficult one. There's no harm in doing that.

I said about third party website like apart from downloading on playstore and app market for PC apart from official website so we can trust the application we are downloaded to install. Having password which is completely random and more difficult to remember is good but still it can be brute forced still it is not going to happen for all the account even if its hacked we have 14 days to lock the account then we can further proceed for account recovery.