Some tips from me:
1.Remember to check if a frontend site uses https.
- Only use well known trusted steem frontends: e.g steemit.com or busy.com
- Make sure the computer you are using is free from malware and keyloggers
- Dont store your steemit password on your google account with chrome. Somebody just needs to compromise your google account to get your steem password.
- Don't just click on a link if it is a shortened url. Find out where it redirects to with this site: http://www.checkshorturl.com