"Save card for faster checkout?" You have answered that prompt a hundred times, and the honest framing is this: every yes is a small bet that this particular company will never be breached, never be careless, and never make cancelling harder because your card is already on file. Sometimes that is a good bet. The trick is knowing which times, and stacking the deck for the rest.
The tiers of the bet
Fine: the handful of major platforms you use constantly. Their security teams are real, and pragmatically, your card is already there. Also fine: paying through Apple Pay, Google Pay, or PayPal, which share a crucial property most people never notice: the merchant gets a token, not your actual card number, so a breach of the store leaks nothing reusable.
Think twice: mid-size shops you buy from yearly. The convenience is near zero, and the card sits in their database through every quiet year of decay, waiting for their breach, not yours. Use guest checkout; typing sixteen digits annually is not a burden.
No: anywhere reached through an ad or a message, anywhere you had to inspect before trusting, and any free trial that wants a card. That last one is its own genre: the card is not there for the trial, it is there for the forgetting.
Credit, debit, and the asymmetry nobody explains
Online, credit and debit cards look identical and behave nothing alike when stolen. Fraud on a credit card is the bank's money while you dispute it, and your liability is capped at little to nothing by law and network policy. Fraud on a debit card is your money, gone from your actual account while the investigation runs, with protections that weaken the longer you take to notice. Same fraud, opposite experience. The rule that follows: debit cards are for cash machines. Everything online goes on credit, or on the next thing.
Many banks and card issuers now generate virtual card numbers: disposable numbers that charge your real account but can be locked to one merchant, capped at an amount, or set to expire. The subscription you might forget gets a capped number. The unfamiliar shop gets a single-use number that is worthless in their inevitable breach. Check your bank or card app for "virtual card"; if yours offers it, this single feature retires most of the saved-card dilemma.
Two habits that finish the job
Turn on transaction alerts for every card, real and virtual: a push notification per charge converts fraud discovery from "someday on a statement" to "eleven seconds later," and criminals test stolen cards with tiny charges precisely because nobody watches the small stuff. And once a season, sweep the saved cards out of merchants you no longer use, which pairs naturally with closing the accounts themselves. The goal is not zero saved cards. It is knowing exactly where the bets are placed.