Google conducted a recent study on their Online Security Blog, comparing the security practices of regular people and security experts. They asked people from both groups to list what they do to stay safe while online.
Regular people said that their top priority was to have an antivirus software installed on their computer. Using strong passwords and changing those passwords frequently were also listed. The regular users also said that only visiting trusted websites and not sharing personal information online were their other forms of safe online practices.
The security experts, on the other hand, said that antivirus software was not as important as installing software updates. The experts also listed using strong passwords, but using unique passwords for each online account and using two-factor authentication when it is available is more important. They also noted that using a password management software will help keep track of all these strong and unique passwords.