Reusing the same weak passwords and account creds everywhere is probably the lowest hanging fruit to grab. Using a good open source password manager like Bitwarden is an easy win.
I'd say using 2FA (not SMS where possible) is a close second if not equally as important. Don't use some TOTP app that isn't open source and doesn't allow for exporting your secrets either. Aegis on Android is really good.
You can also use Bitwarden for this but I like to keep those separate.
For non-tech people this is a great place to start but as @SimpleStacker said the biggest issue is between their ears. They need to start thinking and realize what the risks are and the impact of their laziness or ignorance. Then you can use these tools to avoid being easy prey. No app is gonna protect you. They are tools that you can use to secure your secrets.
Now, I will say getting off of Windows is a must. It is much harder to be secure on Windows when the OS is literally showing you ads. When your OS is the biggest target on the planet. When your OS is a mess of legacy crap piled on top of itself.
I don't recommend people switch to Apple but rather Linux. But Apple would be far better in many ways. I recommend people try Mint or PopOS. Both come with UIs that are similar to Windows. Most people in my exp do not really need Windows or MacOS. They mostly use web apps, email, and a few built in things. They could pretty easily switch to Linux. Its the people that REALLY use the OS that have a harder time switching to Linux.
reply
Yes, if someone use only web apps, then switching from Windows to Linux is really simple. I sometimes use also Zorin OS, with little tinkering it could look almost exactly as Windows 10 - including the icons and the wallpaper. Moreover, after several months of using Linux, we can ask those people (especially elder people) if they notice something. Usually not, or someone tell that the system is faster, it can start in few seconds, etc. Only if I asked them, they realized that the annoying windows updates on shutdown have gone...
reply