For serious stuff (banking, shops you buy in) it pays - if you do not have a virtual keyboard to enter your password) to use a small, cheap USB stick with low capacity. Create an unsuspicioulsy rceated txt-file. There list the password - better passcode - that you need. Right-click and "copy" it, close the stick then go to the shop site, anter aour account name and then paste the code. That way you can bypass any keylogger that you might have already installed on your system.
I use two such USB sticks for going to my banking site, and a bookshop I frequently use. Costed me 3 Euros per stick.
The method is not fail-safe, however: if somebody has a constant stream of screenshots from your desktop being set to him, you are screwed again.
Passwords encryption and according manager programs have one disadvantage: your passwords nevertheless are stored on your HD and the safe place they are in can be found, the encryption can be tried to break through. Better solution is the
physical disconnection, not just a software-installed pseudo-"disconnection". Set your browser so that all your passwords and temp files get deleted when you leave your browser. Use a sandbox. Don't use passwords - use pass
codes.
Consider your privacy to be a high value item - to yourself so to guard it, but also business and criminals seeing it as prey. Do not trade it carelessly away. It's bad enough that all your internet activity nevertheless gets stored forever on American servers, being potential subject for any checking for the rest of your life.
Do not use cloud storage.
Try hard to be as paranoid as you can be. Because in the digital world, there is no such thing like "paranoia".
