Six steps for a normal user with brokerage accounts. The threats that matter now are scams and stolen logins, not viruses. Total cost: $0.
Windows Defender is built in and is enough. Malwarebytes on top is fine. Buy nothing else. Norton, McAfee and the rest add nag screens, not safety.
The single best add. Most infections start with a poisoned ad or a fake result at the top of Google. On Chrome or Edge install uBlock Origin Lite. On Firefox install uBlock Origin.
Bitwarden is free. One password per site, and its autofill only fires on the real schwab.com or fidelity.com. If you land on a fake login page it stays silent. That silence is your warning.
Turn on two‑factor login with an authenticator app or passkey, not text messages (SIM swaps beat texts). Put two‑factor on the email behind those accounts too. It is the master key to everything.
Free at Equifax, Experian and TransUnion. Blocks anyone opening accounts in your name. Unfreeze in minutes when you need a loan.
Leave automatic updates on. Patching beats any product you could buy. Keep OneDrive or another backup on for your documents.