Anything without an HTTPS
This may seem like a no-brainer, but you’d be surprised how many people browse without paying attention to the web addresses they’re on. Lapidus says you need to, though. “Avoid unencrypted websites,” he explains. “Use only those that use HTTPS.” Without that, everything you do can be transmitted in plain text.
The good news is your phone will probably try to warn you if you drift into a site you shouldn’t. “Most modern browsers identify HTTPS-protected websites with a lock icon in the address bar. That’s your indication that the site is using encryption to protect your communication.”