Why this order
A verified address is meaningless without a fingerprint to verify against. An account is not worth protecting until you can reach it reliably. Money should be the last thing you introduce rather than the first, and limits should be decided while you are calm rather than while you are committed.
People generally do this backwards, starting with the money because it feels like the real step, then discovering the rest when something has already gone wrong.
onceSet up the clientThe browser, from the project, at the highest security setting.oncePin the fingerprintOne careful hour. Everything else on this site assumes it.onceDecide your credentialsUnique password, second factor, and the recovery material people skip.onceDecide where things liveWhere addresses, notes and recovery material live, decided in advance.onceDecide your limitsOrder size, balance ceiling and an exit plan, set before you need them.
If you do one thingIf you only do one, do the fingerprint. Every other protection on this site assumes it, and without one the per session check is a ritual that proves nothing at all.