Where secrets live

The device is part of the perimeter.

Local hygiene

An unlocked device with a logged-in browser bypasses every password decision you made. Screen locks, encryption and updates are part of account security.

Sign out of shared computers and check saved sessions.
Malware that steals browser session cookies skips login entirely.

Backups

Keep a copy of what you cannot recreate, with one copy offline. Ransomware and lost phones are ordinary events, not rare ones.