Know what you are trying to do
Work through source verification, package checks, device permissions and the first-run setup. Avoid unknown links and unverified installers.
Follow the sequence
01
Start with a trusted device and source. Pause if any detail looks unfamiliar before continuing.
02
Keep sensitive credentials in a protected environment. Pause if any detail looks unfamiliar before continuing.
03
Verify chain, destination and signing scope. Pause if any detail looks unfamiliar before continuing.
04
Recheck the result and your backup afterward. Pause if any detail looks unfamiliar before continuing.