Set up right
Create a dedicated wallet for experimenting, keep savings elsewhere, and record your seed phrase offline only. Never screenshot it.
Before every connection
Verify the domain, connect from a bookmark, and read each signature. A connection request shares your address; a signature can move funds.
Ongoing safety
Start with small amounts, revoke approvals you no longer need, and add a browser security layer that warns you about phishing sites and dangerous signatures.