diff --git a/docs/pages/wallet-security/cold-vs-hot-wallet.mdx b/docs/pages/wallet-security/cold-vs-hot-wallet.mdx
index f67707ff..e25d9362 100644
--- a/docs/pages/wallet-security/cold-vs-hot-wallet.mdx
+++ b/docs/pages/wallet-security/cold-vs-hot-wallet.mdx
@@ -11,7 +11,7 @@ contributors:
   - role: reviewed
     users: [Coinspect, patrickalphac]
   - role: fact-checked
-    users: []
+    users: [0xusmanf]
 ---
 
 import { TagList, AttributionList, ContributeFooter } from '../../../components'
@@ -95,6 +95,9 @@ Regardless of the type, non-custodial wallets place the full burden of security
 - **Online Vulnerabilities**: If the device they are on (computer or phone) is compromised, your assets can be stolen.
 - **Supply Chain Attacks**: Be cautious of both software and hardware integrity. Always download wallet software from
 official sources and purchase hardware wallets directly from the manufacturer to avoid receiving a tampered device.
+- **Strong Password:** Follow [Strong Password](/opsec/passwords/overview#what-is-a-strong-password) rules.
+- **Minimal Auto-Lock Time:** Set auto-lock to 5-15 minutes. Shorter time limit exposure if unattended and reduce how
+long decrypted keys stay in memory.
 
 ## Further reading
 
diff --git a/docs/pages/wallet-security/for-beginners-and-small-balances.mdx b/docs/pages/wallet-security/for-beginners-and-small-balances.mdx
index a0de3049..ed5575cc 100644
--- a/docs/pages/wallet-security/for-beginners-and-small-balances.mdx
+++ b/docs/pages/wallet-security/for-beginners-and-small-balances.mdx
@@ -6,7 +6,7 @@ tags:
   - Security Specialist
 contributors:
   - role: wrote
-    users: [pinalikefruit]
+    users: [pinalikefruit, 0xusmanf]
   - role: reviewed
     users: [Coinspect]
   - role: fact-checked
@@ -65,6 +65,16 @@ on specific criteria such as transaction clarity, protection against known threa
 Using these tools can provide valuable data points to help you assess a wallet's security posture and make an informed
 decision.
 
+## Security Best Practices
+
+- **Antivirus Software:** Install antivirus to protect your device from malware attacks.
+- **Dedicated Browser Profile:** Use a separate browser profile for wallet and dApp use, isolated from the extensions
+and sites you use for general browsing.
+- **No Browser Sync:** Keep extensions out of browser sync. Sync can auto-install extensions across devices, so one
+malicious extension can spread to every synced device.
+- **Minimal Browser Extensions:** Keep extensions to a minimum. Each one is added attack surface, a compromised
+extension can script wallet popups and alter or intercept transactions.
+
 ## Further reading
 
 - [Wallet Security overview](/wallet-security/overview): how the pages of this framework fit together