The official install is one curl command pasted into Terminal. It downloads the install script, prompts you for your password (Homebrew uses sudo only during install — never after), checks for the Xcode Command Line Tools, and creates the prefix at /opt/homebrew.
The single step everyone forgets on Apple Silicon is the PATH setup afterwards. The installer prints the exact eval line at the end — copy it into ~/.zprofile so future shells find brew. If you skip this, you'll see command not found: brew in every new terminal and waste an hour blaming the install.
After install, run two checks: brew --version to confirm Homebrew is reachable, and brew doctor to confirm your environment is clean. brew doctor will warn about leftover Intel Homebrew files, broken symlinks, or PATH conflicts — fix any warnings now, before your install graph grows.
One choice point: do you want the rolling tip (default) or a tagged release? 99% of users want the rolling install — Homebrew updates fast, and tagged releases miss security patches. Stay on the default unless you have a very specific compliance reason.