Thanks for commenting. When you say "Disable window updates" what do you mean? Do you windows operating system updates? Though they can (rarely) have unintended consequences, it is important to keep your operating system fully patched with the latest updates as they come out. The most common way for hackers to get into systems is when those systems have been patched with the latest security updates for known exploits already in the wild.

By sandbox, do you mean a virtual machine? That's a good way to go, I think, but browsers themselves are, by design, sandboxes which do not allow privileged access to the computer. Problems usually come after a file is downloaded and run outside of the web browser.

The reason I think antivirus running constantly is important is that you will get the latest updates as they are available. Some people purchase antivirus software but don't keep it up-to-date which is almost worse than not having it at all because it creates a false sense of security. If the latest virus definitions aren't actively being scanned for, it's not offering much protection when a new file gets run.

I'm not sure I quite follow what you mean about scripting helping? How is the secure and what encryption is involved? Password managers were designed with encryption and security in mind. For a script to run, it has to be online, so I'm missing you a bit there. Thanks for clarifying.