What are basic security tips noobs should know, but don't?

I'm a millennial and have grown up with a laptop, but still I feel like a danger to myself.

As an average layperson / noobie I follow only the rules you're bombarded with. I heard that a vpn is vital, you should have a different password for each website, and not accept cookies.

What key tips am I missing?