Before it holds anything.
BEFORE USE
Apply all available updates Set a screen lock with a short timeout Enable encryption Create a standard user account for daily work Enable remote wipe or find-my-device
ACCOUNTS
Sign in with unique credentials Enable the second step Do not save passwords in the browser on any shared device
SOFTWARE
Install only what you need, from official sources Remove preinstalled software you will not use Enable the firewall Enable security software
DATA
Set up backup before you put anything important on it
CONFIGURATION
Review privacy and sharing settings Disable services you do not use
RECORD IT
Add it to your device list, with who holds it
BEFORE HANDING IT TO SOMEONE ELSE
Confirm what access it will have
WHAT NOT TO DO
Start using it and secure it later.
That later rarely arrives.
