For exchanges I also recommend 2 factor authentication and don't keep it on them unless your planning to buy or sell soon. Overall best is to keep it in a wallet.