Also: - set up full disk encryption - set a boot up (BIOS) password - for ssh: disable root ssh access, and disable ssh with a password - lock screen when a

Also: - set up full disk encryption - set a boot up (BIOS) password - for ssh: disable root ssh access, and disable ssh with a password - lock screen when away from computer, auto-lock when away