What’s a security practice that sounds minor but actually makes a big difference?

A lot of cybersecurity advice focuses on big ticket items like VPNs, password managers, and zero trust. But in day to day life, some small habits can quietly reduce risk much more than people expect. What’s one practice you’ve adopted (personal or professional) that didn’t seem important at first, but turned out to have a noticeable impact on security or incident prevention?