As a best practice, don't click on any link without first inspecting it. Whether it be on google, on a website, in your email, from a text, etc .... Inspect before you click! If you accidentally click on a suspicious link, quickly close out of the application and power off your device immediately.
Don't keep your password in a notebook next to your computer. Along with that, don't keep your passwords stored in any random app on your phone. If you want to keep track of your passwords, download and utilize a secure password management application, like Keeper Security.
Don't give your social security number to everyone who asks, not even doctor offices. Only provide that information when it is legitimately necessary. Not every organization's encryption methods are created equal. If an organization's online data isn't safe, then your information isn't safe with them.