01
Protect Your Recovery Phrase
Your recovery phrase or private key may give someone control of the wallet it belongs to.
- Keep it somewhere secure that only you control.
- Never screenshot it, upload it to cloud storage, or send it to anyone.
- Never enter it on an unfamiliar website or into a support chat.
- Treat any request for your full phrase as a major red flag.
Legitimate support should never ask you to disclose your full recovery phrase or private key.
02
Review Connections & Approvals
Connecting a wallet, signing a message, and approving a token are different actions with different risks.
- Use official sources to find wallet apps and dApps.
- Check the contract address, token, and approval amount.
- If you do not understand a signature, stop and verify it first.
- Avoid unlimited approvals unless you understand why they are needed.
Revoking an approval can limit future use; it cannot reverse a transfer that has already happened.
03
Improve Storage Security
Separate assets by purpose to reduce the impact of a single mistake.
- Consider a reputable hardware wallet for long-term holdings.
- Keep everyday funds separate from long-term storage.
- Use a strong device passcode and update official wallet software.
- Remember: hardware wallets do not prevent every scam.
Buy hardware wallets only from trusted official channels, and keep the recovery phrase private.