Summed up in points for others:
Dont use same logins! Ever! Use random 12+ char. logins stored inside password manager.
Never 2FA with SMS message. Use GAuth app. ANd ofc use 2FA on everz site that alows it.
"auto insert password and username" - if you mean login saved inside Chrome - NEVER!!!!! Never store password inside the browser! Use password manager.
Whitelist IP if possible
oh....and the most important. Dont store larger amounts of money on exchange. Ever. Use hardware wallet.
RE: How i lost my first bitcoin to a Hacker or phisher