Device encryption: turn it on, it's free

BitLocker (Windows Pro/Enterprise) and FileVault (Mac) encrypt the hard drive so a lost or stolen laptop doesn't hand over your files and saved passwords to whoever finds it. It's built into the operating system at no extra cost and has minimal performance impact on modern hardware.

Coach's tip: write down the recovery key somewhere safe (your IT support or password manager) — encryption without a recorded key can lock you out of your own machine.