Start here
You can't fix every security problem at once, and you don't need to. Professionals decide what to fix first by asking two questions about each risk: how likely is it, and how bad would it be (its impact)?
By the end of this lesson, you'll be able to do the same for your own accounts and devices.