Usually private keys can be recovered using 12 to 24 word phrase. which Make a backup of that phrase as well. you have to create an e-mail that will be used only for this wallet. Use two-factor authentication everywhere it is possible. You just need to get an app, that will generate passwords for your accounts and create one more layer of protection. Pay attention to what exchanges you are using choose reputable and secure ones to avoid bad experience. Update your software regularly, always get the latest version of wallet you use.