One thing that's hard for new users is nsec security - your nsec private key IS YOUR IDENTITY - no username/password combo, and no central authority to reset your password if you lose it or if somebody else gains access to it.  Protect your nsec key at all costs.  To avoid typing it into every new website, use a browser extension.  On Chrome, you can use nos2x.  On Firefox use nos2xFox.  On Android devices you should use Kiwi Browser plus the nos2x extension.  On iOS devices you should use the Nostore app.  You put your nsec key in the extension and give permissions to nostr sites and apps as you desire.