Use a strong device lock
A device passcode or supported biometric lock helps protect local access.
Enable multifactor authentication on important accounts
CISA currently recommends MFA as a significant improvement over relying on a password alone.
Review app permissions
Apps should have access appropriate to their function rather than everything by default.
Know the backup account
Recovery is easier when you know which Apple or Google account holds the device backup.
General consumer technology information only. Interfaces and menu names change. Before resets, reinstalls, storage changes or other major actions, verify that important data is backed up and use current manufacturer/service-provider instructions.