Assign complex passwords to your IoT devices, approve security updates, and enable two-factor authentication if you can.