I put this together for a previous employer. It's slightly modified here. Also, PrivacyGuides.org is a solid website with tips on what tools to use. A little over the top for some users, but a good place to go if you have questions. Personal Cybersecurity Password reuse and phishing