Wallet security checklist

Keys are the account

Whoever controls the private keys controls the funds. Seed phrases must never be typed into websites, chat apps, or “support agents.” Hardware wallets reduce exposure for long-term holdings.

Approvals and phishing

Token approvals can let a contract move assets later. Review and revoke stale allowances. Prefer bookmarked URLs over ads. Verify domains character by character before connecting a wallet.

Safe learning loop

Practice on testnets, then use small mainnet amounts, then scale only after the full path is understood. Educational tooling should never ask for your seed phrase.

Return to Learn → Security.

Tiered wallet setup

Many operators use three tiers: a cold or hardware wallet for savings, a warm wallet for periodic funding, and a hot wallet for daily experiments. Only the hot wallet connects to new sites. That containment limits blast radius when a phishing site or malicious approval appears.

Incident response basics

If you suspect compromise, move untouched funds from a secure seed to fresh addresses, revoke approvals from a safe environment when possible, and stop interacting with unknown contracts. Document what happened so you do not repeat the click path.

Next