- Open the App Store and go to
Updates; - Install latest system updates.
It's imperative to encrypt your hard disk, assuming you haven't already done so during OS installation.
- Go to
System Settings > Security & Privacy > FileVault; - Turn on FileVault; make sure you don't share your encryption key with Apple (kinda beats the purpose of encryption).
- Go to
System Preferences > Spotlight > Search Results; - Disable everything, except Applications and System Settings.
- Go to
System Preferences > Network; - Select Wi-Fi from the left-hand pane and click the Advanced button;
- Open the DNS tab;
- Add the following IP addresses (click the + button under the DNS Servers, repeat where applicable);
- 1.1.1.1
- 1.0.0.1
- 2606:4700:4700::1111
- 2606:4700:4700::1001
- Hit OK.
You might want to repeat the process for your Ethernet interface.
Enabling Find My Mac is optional and mostly makes sense for remote devices, such as laptops.
- Go to
System Preferences > iCloud; - Log in to iCloud;
- Select the Find My Mac checkbox.
If the worst happens and your machine get's stolen, you will be able to track it, remotely lock it, and send messages to its screen via iCloud.com or the Find My iPhone app for iPad/iPhone.