Before making a transaction or entering sensitive information on a web site, check that your browser address window is green, the URL (web address) has changed from 'http' to 'https' and that a closed padlock icon is present. If your browser is up to date, it should support these features.
Choose passwords for your online services that are difficult for anyone else to guess. A strong password is long and complex (a variety of letters, numbers and other characters), unique (not re-used for other services or apps), current (changed at least every 90 days) and not obvious (avoid dictionary words, dates, names etc.).