Most people don't realize how easy it is to get hacked and lose all their money in crypto space. Once someone has your private key it is all over.
Here are my few thoughts about what you should do and what you should avoid to enjoy your gains worry free.
Do not use same address for everything. Use several different ones: you can quickly create them in Metamask. Your rule of thumb should be one account for one website/app
Don't interact with unknown contracts if you have multiple coins on the same address
Read what you are signing with your Metamask. If you have any doubts, don't sign it
Turn off clipboard history in your Windows and clear clipboard data:
Make sure you are using good, updated browser
Make sure your browser does not allow websites to interact with your clipboard:
Do not click anything people send you, unless you really do trust your browser
Do not install anything which you don't really trust on your computer
If you have to install something, make sure you download it directly from it's developer
Do not use shareware "anyone can upload anything here" sites to download your software as it may be modified by a third party
There is a good chance free, little programs will install something you don't want on your machine (I am talking stuff like "Youtube downloader" bollocks)
If anything claims it will keep your computer safe and secure, give it a good look as it may be a trojan itself
Enable 2FA everywhere you can. Remember to write down your seeds somewhere secure
Use password managers and different passwords
Don't log in on computers that are not secure (ie: your mom's)
Take a good care of your phone, try not to lose it. If you have to lose it, make sure everything is password locked, apps included
Turn on "Find your phone" in Google (or similar service in Apple), you will be able to locate and/or erase your phone if you have to
You mobile phone is a potential gate to your email and your data, don't install any crap apps on it
Do not keep any important docs on your mobile (private keys!)
Keep your mobile and computer system updated
Do not use dodgy sites on a computer you use for crypto (porn included!). Dodgy websites and ads will try to infect you computer with stuff
If you have skills, consider using Linux instead of Windows as it is less prone to hacks
Ideally get yourself hardware wallet
That's it for now, these are obvious things but everyone breaches these rules (me included).