a very good starting point is never share your keys - dont click links blindly - if an offer it to good to be true it's mostlikely a scam - and never ever enter a private key into a chat / website etc. Keychain Extension just handles everything fine :)