Use Google Authenticator or Authy for maximum security.
Move long-term crypto to a hardware wallet for safety.