Cyber Security! What are you doing?

My bank account got hacked this week... eeeek!!! Made me think of cyber security, use of passwords within the office staff and seeing where we are being too lax. I had a tech guy out to help me fix it and fortunately the damage can be undone but I wanted to see if anyone had some helpful tips on how to avoid this?

So far my key learnings are:

• Use something like lastpass or one password
• Don't have any matching passwords
• Don't use the password function in edge or your web browser. That keeps everything on your machine but someone can remote in to that and steal your stuff
• Change passwords somewhat frequently (if you're using last pass it doesn't matter cuz you aren't memorizing it anyway)

What am I missing from this list?